diff --git a/src/tracker/api/project_files.py b/src/tracker/api/project_files.py
index 5d5672b..15a02dc 100644
--- a/src/tracker/api/project_files.py
+++ b/src/tracker/api/project_files.py
@@ -193,7 +193,7 @@ async def get_project_file(
 async def download_project_file(
     slug: str,
     file_id: str,
-    token: Optional[str] = Query(None),
+    token: Optional[str] = Query(None),  # Auth handled by middleware (query param for img src)
     db: AsyncSession = Depends(get_db),
 ):
     project = await _get_project(slug, db)