diff --git a/src/hooks.server.ts b/src/hooks.server.ts
index dfb9f05..92e3282 100644
--- a/src/hooks.server.ts
+++ b/src/hooks.server.ts
@@ -19,7 +19,7 @@ if (AUTO_MIGRATE === 'true') {
 await runSeeds();
 
 export const handle = sequence(
-	csrf(['/oauth2/token', '/oauth2/introspect']),
+	csrf(['/oauth2/token', '/oauth2/introspect', '/oauth2/device_authorization']),
 	handleSession({
 		secret: SESSION_SECRET,
 		cookie: {