diff --git a/pkg/server/api/trust/v1/resolver.go b/pkg/server/api/trust/v1/resolver.go
index 8a59d1ae7..b276b6355 100644
--- a/pkg/server/api/trust/v1/resolver.go
+++ b/pkg/server/api/trust/v1/resolver.go
@@ -96,11 +96,14 @@ func NewMux(
 	)
 	r.Method(http.MethodGet, "/session-transfer", sessionTransferHandler)
 
-	r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
-	r.Use(compliancepage.NewMemberProvisioningMiddleware(trustSvc, logger))
-
 	graphqlHandler := NewGraphQLHandler(iamSvc, trustSvc, esignSvc, mailmanSvc, logger, baseURL, cookieConfig, tokenSecret)
-	r.Handle("/graphql", graphqlHandler)
+	r.Group(
+		func(r chi.Router) {
+			r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
+			r.Use(compliancepage.NewMemberProvisioningMiddleware(trustSvc, logger))
+			r.Handle("/graphql", graphqlHandler)
+		},
+	)
 
 	return r
 }