diff --git a/auth/middleware.go b/auth/middleware.go
index a8bda2a9843324d6ea8a14af6abc5b2ecad28b8c..be0663ebd885e70a213855b57391647ad4409149 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -145,6 +145,7 @@
 	return &auth, nil
 }
 
+// NOTE: This only works for meta.sr.ht (should we move it?)
 func authForOAuthClient(ctx context.Context, clientUUID string) (*AuthContext, error) {
 	var auth AuthContext
 	if err := database.WithTx(ctx, &sql.TxOptions{
@@ -166,7 +167,8 @@ 				`u.suspension_notice`,
 			}).
 			From(`"oauth2_client" client`).
 			Join(`"user" u ON u.id = client.owner_id`).
-			Where(`client.client_uuid = ?`, clientUUID)
+			Where(`client.client_uuid = ?`, clientUUID).
+			Where(`client.revoked = false`)
 		if rows, err = query.RunWith(tx).Query(); err != nil {
 			panic(err)
 		}