diff --git a/src/plugins/api/authentication.ts b/src/plugins/api/authentication.ts
index d6d0673..f3ae08c 100644
--- a/src/plugins/api/authentication.ts
+++ b/src/plugins/api/authentication.ts
@@ -341,8 +341,8 @@ function refreshRoute(server: FastifyInstance<Server, IncomingMessage, ServerRes
         const container = containerFor(server.database.client, 'Users')
         const tokenItem = container.item(request.body.refresh, userId)
 
-        if (!tokenItem) return badRequestError(reply, 'Invalid refresh token')
         const { resource: token } = await tokenItem.read<UserToken>()
+        if (!token) return badRequestError(reply, 'Invalid refresh token')
 
         if (token.expires < Date.now()) return badRequestError(reply, 'Refresh token expired')