diff --git a/server/grist/api.js b/server/grist/api.js
index 4ec39d357f92e3d256de6ea9c9e1fced6924f767..c280f965b0c0c5d47d73baed9ea5abcb966177e6 100755
--- a/server/grist/api.js
+++ b/server/grist/api.js
@@ -1,10 +1,12 @@
 const superagent = require('superagent')
 const config = require('config')
 
-// const authBearer = passport.authenticate('bearer', { session: false })
-
 module.exports = app => {
-  app.get('/grist/rest/api/search', (req, res) => {
+  const authBearer = app.locals.passport.authenticate('bearer', {
+    session: false,
+  })
+
+  app.get('/grist/rest/api/search', authBearer, (req, res) => {
     res.set({ 'Content-Type': 'application/json' })
 
     const { query, page } = req.query