diff --git a/cmd/serve/http/http.go b/cmd/serve/http/http.go
index 592580826..780aa9c91 100644
--- a/cmd/serve/http/http.go
+++ b/cmd/serve/http/http.go
@@ -96,6 +96,9 @@ func newServer(f fs.Fs, templatePath string) *server {
 }
 
 func (s *server) Bind(router chi.Router) {
+	if m := auth.Auth(auth.Opt); m != nil {
+		router.Use(m)
+	}
 	router.Use(
 		middleware.SetHeader("Accept-Ranges", "bytes"),
 		middleware.SetHeader("Server", "rclone/"+fs.Version),