diff --git a/api/src/services/authentication.ts b/api/src/services/authentication.ts
index 50889f8f5a..91361cdbf6 100644
--- a/api/src/services/authentication.ts
+++ b/api/src/services/authentication.ts
@@ -273,8 +273,8 @@ export class AuthenticationService {
 			.from('directus_sessions AS s')
 			.leftJoin('directus_users AS u', 's.user', 'u.id')
 			.leftJoin('directus_shares AS d', 's.share', 'd.id')
-			.leftJoin('directus_roles AS r', function () {
-				this.onIn('r.id', ['u.role', 'd.role']);
+			.leftJoin('directus_roles AS r', (join) => {
+				join.onIn('r.id', [this.knex.ref('u.role'), this.knex.ref('d.role')]);
 			})
 			.where('s.token', refreshToken)
 			.andWhere('s.expires', '>=', new Date())