diff --git a/http/websocket.hpp b/http/websocket.hpp
index 9a5aa29..8774200 100644
--- a/http/websocket.hpp
+++ b/http/websocket.hpp
@@ -101,8 +101,7 @@
             if (session != nullptr)
             {
                 // use protocol for csrf checking
-                if (session->cookieAuth &&
-                    !crow::utility::constantTimeStringCompare(
+                if (!crow::utility::constantTimeStringCompare(
                         protocol, session->csrfToken))
                 {
                     BMCWEB_LOG_ERROR << "Websocket CSRF error";