diff --git a/api/routes/characters.js b/api/routes/characters.js
index 4c13c08..5fa0aa4 100644
--- a/api/routes/characters.js
+++ b/api/routes/characters.js
@@ -36,6 +36,7 @@ router.get('/characters/:character_id', async (req, res) => {
 });
 
 router.post('/characters', async (req, res) => {
+    if (!isAuthorized(req, res)) { return; }
     try {
         const newCharacterData = req.body;