From 458d794f52492a311316add9486a3986c2b64904 Mon Sep 17 00:00:00 2001
From: KAZUHIRO ITO <kazuhiro.ito.ek@hitachi-solutions.com>
Date: Thu, 27 Feb 2020 19:41:59 +0900
Subject: [PATCH] Fix tokensStrategy order

---
 packages/node_modules/@node-red/editor-api/lib/auth/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/node_modules/@node-red/editor-api/lib/auth/index.js b/packages/node_modules/@node-red/editor-api/lib/auth/index.js
index c3948cd27..88e924e53 100644
--- a/packages/node_modules/@node-red/editor-api/lib/auth/index.js
+++ b/packages/node_modules/@node-red/editor-api/lib/auth/index.js
@@ -61,7 +61,7 @@ function init(_settings,storage) {
 function needsPermission(permission) {
     return function(req,res,next) {
         if (settings && settings.adminAuth) {
-            return passport.authenticate(['bearer','anon','tokens'],{ session: false })(req,res,function() {
+            return passport.authenticate(['bearer','tokens','anon'],{ session: false })(req,res,function() {
                 if (!req.user) {
                     return next();
                 }