diff --git a/core/service.go b/core/service.go
index 40cc28c..4668878 100644
--- a/core/service.go
+++ b/core/service.go
@@ -606,8 +606,13 @@ func (sh *serviceDescription) authorize(w http.ResponseWriter, r *http.Request)
 				authtype = newType
 				uid = newId
 			}
-		} else {
+		} else if *devflag {
 			email = fmt.Sprintf("%s@guest.flag", uid)
+		} else {
+			// authtype이 없으면 입장 불가
+			logger.Error("authorize failed. 'type' query parameter is missing")
+			w.WriteHeader(http.StatusBadRequest)
+			return
 		}
 	} else {
 		email = fmt.Sprintf("%s@noauth.flag", uid)