Version 4.7.8

system/Session/Front.php

@@ -160,7 +160,7 @@ class _Front extends \IPS\Session
 				{					
 					$accessToken = \IPS\Api\OAuthClient::accessTokenDetails( mb_substr( $authorizationHeader, 7 ) );
 					$client = \IPS\Api\OAuthClient::load( $accessToken['client_id'] );
-					if ( $client->graphql and $accessToken['member_id'] === $expectedMember->member_id )
+					if ( \in_array($client->api_access, [ 'graphql', 'both'] ) AND $accessToken['member_id'] === $expectedMember->member_id )
 					{
 						$success = TRUE;
 					}