diff --git a/src/controllers/helpers.js b/src/controllers/helpers.js
index e525fb80cc..1173e6e2cd 100644
--- a/src/controllers/helpers.js
+++ b/src/controllers/helpers.js
@@ -122,7 +122,7 @@ helpers.notAllowed = async function (req, res, error) {
 
 	if (req.loggedIn || req.uid === -1) {
 		if (res.locals.isAPI) {
-			if (req.path.startsWith('/api/v3')) {
+			if (req.originalUrl.startsWith('/api/v3')) {
 				helpers.formatApiResponse(403, res, error);
 			} else {
 				res.status(403).json({