diff --git a/src/main/java/org/traccar/api/resource/SessionResource.java b/src/main/java/org/traccar/api/resource/SessionResource.java
index 327e2b0f0..bbabba39d 100644
--- a/src/main/java/org/traccar/api/resource/SessionResource.java
+++ b/src/main/java/org/traccar/api/resource/SessionResource.java
@@ -79,7 +79,12 @@ public class SessionResource extends BaseResource {
     public User get(@QueryParam("token") String token) throws StorageException, IOException, GeneralSecurityException {
 
         if (token != null) {
-            LoginResult loginResult = loginService.login(token);
+            LoginResult loginResult;
+            try {
+                loginResult = loginService.login(token);
+            } catch (SecurityException | GeneralSecurityException e) {
+                throw new WebApplicationException(Response.status(Response.Status.UNAUTHORIZED).build());
+            }
             if (loginResult != null) {
                 User user = loginResult.getUser();
                 SessionHelper.userLogin(actionLogger, request, user, loginResult.getExpiration());