diff --git a/server/web/auth/auth.go b/server/web/auth/auth.go
index 4aae796..db29439 100644
--- a/server/web/auth/auth.go
+++ b/server/web/auth/auth.go
@@ -63,7 +63,8 @@ func BasicAuth(accounts gin.Accounts) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		user, found := pairs.searchCredential(c.Request.Header.Get("Authorization"))
 		if !found {
-			if strings.HasPrefix(c.FullPath(), "/stream") {
+			if strings.HasPrefix(c.FullPath(), "/stream") ||
+				strings.HasPrefix(c.FullPath(), "/playlist") {
 				c.Set("not_auth", true)
 				return
 			}