diff --git a/jupyterlab_server/listings_handler.py b/jupyterlab_server/listings_handler.py
index b9e5973..bf310c7 100644
--- a/jupyterlab_server/listings_handler.py
+++ b/jupyterlab_server/listings_handler.py
@@ -82,6 +82,7 @@ class ListingsHandler(APIHandler):
     # The PeriodicCallback that schedule the call to fetch_listings method.
     pc = None
 
+    @tornado.web.authenticated
     def get(self, path: str) -> None:
         """Get the listings for the extension manager."""
         self.set_header("Content-Type", "application/json")