@@ -132,16 +132,16 @@ func (p *provisionerDaemonAuth) authorize(r *http.Request, orgID uuid.UUID, tags
132132return uuid .Nil ,nil ,xerrors .New ("user unauthorized" )
133133}
134134
135- // Allow fallback to PSK auth if the user is not allowed to create provisioner daemons.
136- // This is to preserve backwards compatibility with existing user provisioner daemons.
137- // If using PSK auth, the daemon is, by definition, scoped to the organization.
138- tags = provisionersdk .MutateTags (uuid .Nil ,tags )
139-
140135pskKey ,err := uuid .Parse (codersdk .ProvisionerKeyIDPSK )
141136if err != nil {
142137return uuid .Nil ,nil ,xerrors .Errorf ("parse psk provisioner key id: %w" ,err )
143138}
144139
140+ // Allow fallback to PSK auth if the user is not allowed to create provisioner daemons.
141+ // This is to preserve backwards compatibility with existing user provisioner daemons.
142+ // If using PSK auth, the daemon is, by definition, scoped to the organization.
143+ tags = provisionersdk .MutateTags (uuid .Nil ,tags )
144+
145145return pskKey ,tags ,nil
146146}
147147