From aa31e985c403580769642496adfe2828da1c6156 Mon Sep 17 00:00:00 2001
From: Thomas Rittson <trittson@bitwarden.com>
Date: Thu, 27 Mar 2025 10:33:15 +1000
Subject: [PATCH] Fix comment

---
 src/Api/Startup.cs | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/Api/Startup.cs b/src/Api/Startup.cs
index c1375b2031..b59a01dfef 100644
--- a/src/Api/Startup.cs
+++ b/src/Api/Startup.cs
@@ -257,10 +257,8 @@ public class Startup
 
         // Add authentication and authorization to the request pipeline.
         app.UseAuthentication();
-
-        // Add current context - before authz. Is this OK?
+        // Note: ICurrentContext is used in authorization middleware so it must be registered first
         app.UseMiddleware<CurrentContextMiddleware>();
-
         app.UseAuthorization();
 
         // Add endpoints to the request pipeline.