diff --git a/app/Http/Middleware/Authenticate.php b/app/Http/Middleware/Authenticate.php
index 941d1bd..6832d89 100644
--- a/app/Http/Middleware/Authenticate.php
+++ b/app/Http/Middleware/Authenticate.php
@@ -27,7 +27,7 @@ class Authenticate extends Middleware
         // TODO: check this works
         if (Helper::isRequestForApiV1($request)) {
             // Use patched v1 Auth mecanism (without bearer reimplementation)
-            $bearerToken = Helper::getBearerTokenFromRequest($request) ?? $request->api_token;
+            $bearerToken = Helper::getBearerTokenFromRequest($request) ?? $request->api_token ?? '';
             $brand       = Service::getFromBearerToken($bearerToken)->brand;
             $request->request->add(['brand_id' => $brand->id]);
             $response = $next($request);
diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
index 7c7e915..df4b423 100644
--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -25,6 +25,8 @@ class AppServiceProvider extends ServiceProvider
      */
     public function boot()
     {
+        //! Important pourra etre retiré quand la V1 sera supprimé
+        // empeche l'encapsulation dans data
         JsonResource::withoutWrapping();
         if (!in_array(config('app.env'), ['local', 'testing'])) {
             URL::forceScheme('https');