From 66bec081b27c153fd27c7614cf296c8c80beaf73 Mon Sep 17 00:00:00 2001
From: Victor Santos <victor@infisical.com>
Date: Tue, 11 Nov 2025 16:22:02 -0300
Subject: [PATCH] refactor: reorder parameters in identity access token
 validation

---
 backend/src/server/plugins/auth/inject-identity.ts            | 4 ++--
 .../identity-access-token/identity-access-token-service.ts    | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/backend/src/server/plugins/auth/inject-identity.ts b/backend/src/server/plugins/auth/inject-identity.ts
index 31f3139ec..e6ba2eec7 100644
--- a/backend/src/server/plugins/auth/inject-identity.ts
+++ b/backend/src/server/plugins/auth/inject-identity.ts
@@ -182,8 +182,8 @@ export const injectIdentity = fp(
         case AuthMode.IDENTITY_ACCESS_TOKEN: {
           const identity = await server.services.identityAccessToken.fnValidateIdentityAccessToken(
             token,
-            subOrganizationSelector,
-            req.realIp
+            req.realIp,
+            subOrganizationSelector
           );
           const serverCfg = await getServerCfg();
           requestContext.set("orgId", identity.orgId);
diff --git a/backend/src/services/identity-access-token/identity-access-token-service.ts b/backend/src/services/identity-access-token/identity-access-token-service.ts
index 3479d929e..c720c97c0 100644
--- a/backend/src/services/identity-access-token/identity-access-token-service.ts
+++ b/backend/src/services/identity-access-token/identity-access-token-service.ts
@@ -186,8 +186,8 @@ export const identityAccessTokenServiceFactory = ({
 
   const fnValidateIdentityAccessToken = async (
     token: TIdentityAccessTokenJwtPayload,
-    subOrganizationSelector?: string,
-    ipAddress?: string
+    ipAddress?: string,
+    subOrganizationSelector?: string
   ) => {
     const identityAccessToken = await identityAccessTokenDAL.findOne({
       [`${TableName.IdentityAccessToken}.id` as "id"]: token.identityAccessTokenId,