diff --git a/app/controllers/auth.controller.js b/app/controllers/auth.controller.js
index 22928de..4701f0b 100644
--- a/app/controllers/auth.controller.js
+++ b/app/controllers/auth.controller.js
@@ -85,6 +85,7 @@ exports.signin = (req, res) => {
         user.password
       );
 
+      
       if (!passwordIsValid) {
         return res.status(401).send({
           accessToken: null,
@@ -92,6 +93,13 @@ exports.signin = (req, res) => {
         });
       }  
 
+      if (!user.active) {
+        return res.status(401).send({
+          accessToken: null,
+          message: "oof! ta pas activé ton compte my brother in christ"
+        });
+      }
+
       var token = jwt.sign({ id: user.id, name: user.username }, config.secret, {
         expiresIn: 86400 // 24 hours
       });