From 038f6668998e70ee2fe7524a62bc8ded2f45d6f0 Mon Sep 17 00:00:00 2001
From: Todd Martin <tmartin@bitwarden.com>
Date: Sun, 20 Apr 2025 21:33:23 -0400
Subject: [PATCH] Fixed order of initialization.

---
 .../IdentityServer/RequestValidators/BaseRequestValidator.cs    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
index 897573ba1a..350129acda 100644
--- a/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
+++ b/src/Identity/IdentityServer/RequestValidators/BaseRequestValidator.cs
@@ -78,8 +78,8 @@ public abstract class BaseRequestValidator<T> where T : class
         CustomValidatorRequestContext validatorContext)
     {
         // 1. We need to check if the user's master password hash is correct.
-        var user = validatorContext.User;
         var valid = await ValidateContextAsync(context, validatorContext);
+        var user = validatorContext.User;
         if (!valid)
         {
             await UpdateFailedAuthDetailsAsync(user, false, !validatorContext.KnownDevice);