diff --git a/deploy/dev/envoy.yaml b/deploy/dev/envoy.yaml
index 5a21fc3..a18a89c 100644
--- a/deploy/dev/envoy.yaml
+++ b/deploy/dev/envoy.yaml
@@ -651,6 +651,11 @@ static_resources:
                             headers:
                               - name: ":method"
                                 exact_match: GET
+                          requires:
+                            requires_any:
+                              requirements:
+                                - provider_name: juwan_user_jwt
+                                - allow_missing: {}
                         - match:
                             safe_regex:
                               google_re2: {}
@@ -663,6 +668,11 @@ static_resources:
                             headers:
                               - name: ":method"
                                 exact_match: GET
+                          requires:
+                            requires_any:
+                              requirements:
+                                - provider_name: juwan_user_jwt
+                                - allow_missing: {}
                         - match:
                             prefix: /api/v1/reviews
                             headers:
diff --git a/deploy/k8s/envoy/envoy.yaml b/deploy/k8s/envoy/envoy.yaml
index 27e6bb1..b330acc 100644
--- a/deploy/k8s/envoy/envoy.yaml
+++ b/deploy/k8s/envoy/envoy.yaml
@@ -449,6 +449,11 @@ data:
                                 headers:
                                   - name: ":method"
                                     exact_match: "GET"
+                              requires:
+                                requires_any:
+                                  requirements:
+                                    - provider_name: juwan_user_jwt
+                                    - allow_missing: {}
                             - match:
                                 prefix: "/api/v1/reviews"
                                 headers:
@@ -487,6 +492,11 @@ data:
                                 headers:
                                   - name: ":method"
                                     exact_match: "GET"
+                              requires:
+                                requires_any:
+                                  requirements:
+                                    - provider_name: juwan_user_jwt
+                                    - allow_missing: {}
                             - match:
                                 safe_regex:
                                   google_re2: {}