Do device-generated JWT authentication first

Negative results are faster, because we're just counting periods.
timpanssi · Mar 20, 2018 · 45ca330 · 45ca330
1 parent 5c78154
commit 45ca330
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/identities/api.py b/identities/api.py
@@ -72,7 +72,7 @@ def create(self, validated_data):
 class UserIdentityViewSet(ListModelMixin, CreateModelMixin, DestroyModelMixin, GenericViewSet):
     queryset = UserIdentity.objects.all()
     serializer_class = UserIdentitySerializer
-    authentication_classes = (OidcTokenAuthentication, DeviceGeneratedJWTAuthentication)
+    authentication_classes = (DeviceGeneratedJWTAuthentication, OidcTokenAuthentication)
     permission_classes = (IsAuthenticated, ScopePermission)
     required_scopes = ('identities',)