diff --git a/pkg/server/router.go b/pkg/server/router.go
index 73e6503..6354c91 100644
--- a/pkg/server/router.go
+++ b/pkg/server/router.go
@@ -31,8 +31,11 @@ func (revsuit *Revsuit) registerPlatformRouter() {
 	// /api need Authorization
 	api := revsuit.http.Router.Group(revsuit.config.AdminPathPrefix + "/api")
 	api.Use(func(c *gin.Context) {
-		cookieToken, err := c.Request.Cookie("token")
-		if !(c.Request.Header.Get("Token") == revsuit.http.Token || err == nil && cookieToken.Value == revsuit.http.Token) {
+		token, err := c.Cookie("token")
+		if err == http.ErrNoCookie {
+			token = c.Request.Header.Get("Token")
+		}
+		if token != revsuit.http.Token {
 			c.Abort()
 			c.Status(403)
 		}