diff --git a/app/Http/Middleware/HMACAuthorization.php b/app/Http/Middleware/HMACAuthorization.php
index eda4f8692..4f5c86f2b 100644
--- a/app/Http/Middleware/HMACAuthorization.php
+++ b/app/Http/Middleware/HMACAuthorization.php
@@ -148,7 +148,7 @@ class HMACAuthorization
     protected function validateIPAccess()
     {
         if (! is_null($this->key()->allowed_ips)) {
-            foreach ($this->key()->allowed_ips as $ip) {
+            foreach (json_decode($this->key()->allowed_ips) as $ip) {
                 if (Range::parse($ip)->contains(new IP($this->request()->ip()))) {
                     return true;
                 }