diff --git a/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt b/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt
index bf546490c..105fe8f76 100644
--- a/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt
+++ b/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt
@@ -90,7 +90,7 @@ class SecurityConfiguration(
             // used by webui
             "/api/v1/oauth2/providers",
             // epub resources - fonts are always requested anonymously, so we check for authorization within the controller method directly
-            "api/v1/books/{bookId}/resource/**",
+            "/api/v1/books/{bookId}/resource/**",
             // OPDS authentication document
             "/opds/v2/auth",
           ).permitAll()