diff --git a/lib/Db/Acl.php b/lib/Db/Acl.php
index 04195946b9..735f9a19fc 100644
--- a/lib/Db/Acl.php
+++ b/lib/Db/Acl.php
@@ -65,4 +65,11 @@ public function getPermission(int $permission): bool {
 			default => false,
 		};
 	}
+
+	public function jsonSerialize(): array {
+		$json = parent::jsonSerialize();
+		unset($json['token']);
+
+		return $json;
+	}
 }
diff --git a/tests/data/deck.json b/tests/data/deck.json
index 6b00ce57a6..9d9e90f7cb 100644
--- a/tests/data/deck.json
+++ b/tests/data/deck.json
@@ -433,8 +433,7 @@
                     "permissionEdit": true,
                     "permissionShare": false,
                     "permissionManage": false,
-                    "owner": false,
-                    "token": null
+                    "owner": false
                 },
                 {
                     "id": 5,
@@ -449,8 +448,7 @@
                     "permissionEdit": false,
                     "permissionShare": true,
                     "permissionManage": false,
-                    "owner": false,
-                    "token": null
+                    "owner": false
                 },
                 {
                     "id": 6,
@@ -465,8 +463,7 @@
                     "permissionEdit": false,
                     "permissionShare": false,
                     "permissionManage": true,
-                    "owner": false,
-                    "token": null
+                    "owner": false
                 }
             ],
             "permissions": {
diff --git a/tests/unit/Db/AclTest.php b/tests/unit/Db/AclTest.php
index 1e8f30c41f..06953b9838 100644
--- a/tests/unit/Db/AclTest.php
+++ b/tests/unit/Db/AclTest.php
@@ -59,8 +59,7 @@ public function testJsonSerialize() {
 			'permissionEdit' => true,
 			'permissionShare' => true,
 			'permissionManage' => true,
-			'owner' => false,
-			'token' => null
+			'owner' => false
 		], $acl->jsonSerialize());
 		$acl = $this->createAclGroup();
 		$this->assertEquals([
@@ -71,8 +70,7 @@ public function testJsonSerialize() {
 			'permissionEdit' => true,
 			'permissionShare' => true,
 			'permissionManage' => true,
-			'owner' => false,
-			'token' => null
+			'owner' => false
 		], $acl->jsonSerialize());
 	}
 
@@ -87,8 +85,7 @@ public function testSetOwner() {
 			'permissionEdit' => true,
 			'permissionShare' => true,
 			'permissionManage' => true,
-			'owner' => true,
-			'token' => null
+			'owner' => true
 		], $acl->jsonSerialize());
 	}