diff --git a/src/Runner.Server/Controllers/AgentController.cs b/src/Runner.Server/Controllers/AgentController.cs
index 7a8e2d3a192..bd27b08ffe8 100644
--- a/src/Runner.Server/Controllers/AgentController.cs
+++ b/src/Runner.Server/Controllers/AgentController.cs
@@ -19,8 +19,8 @@
 namespace Runner.Server.Controllers
 {
     [ApiController]
-    // [Authorize]
     [Route("{owner}/{repo}/_apis/v1/[controller]")]
+    [Authorize(AuthenticationSchemes = "Bearer")]
     public class AgentController : VssControllerBase
     {
 
diff --git a/src/Runner.Server/Controllers/AgentSessionController.cs b/src/Runner.Server/Controllers/AgentSessionController.cs
index 0d473243407..67413ad8083 100644
--- a/src/Runner.Server/Controllers/AgentSessionController.cs
+++ b/src/Runner.Server/Controllers/AgentSessionController.cs
@@ -1,4 +1,4 @@
-using System;
+using System;
 using System.Collections.Generic;
 using System.IO;
 using System.Linq;
@@ -16,9 +16,9 @@
 
 namespace Runner.Server.Controllers
 {
-    [Authorize(AuthenticationSchemes = "Bearer")]
     [ApiController]
     [Route("{owner}/{repo}/_apis/v1/[controller]")]
+    [Authorize(AuthenticationSchemes = "Bearer")]
     public class AgentSessionController : VssControllerBase
     {