????

No-Issue

Signed-off-by: James Tanner <[email protected]>

galaxy_ng/app/dynaconf_hooks.py

@@ -551,26 +551,26 @@ def configure_authentication_backends(settings: Dynaconf) -> Dict[str, Any]:
     based on the value of AUTHENTICATION_BACKEND_PRESET the installer should set.
 
     For AAP user migration scenarios (https://github.com/ansible/django-ansible-base/pull/611),
-    the PrefixedUserAuthBackend must always be first in the list.
+    the PrefixedUserAuthBackend should always be last in the list.
     """
 
     data = {}
 
     # default data
     backends = settings.get("AUTHENTICATION_BACKENDS", [])
 
-    # insert prefix stuff
-    prefix_backend = "ansible_base.lib.backends.prefixed_user_auth.PrefixedUserAuthBackend"
-    if prefix_backend not in backends:
-        backends.insert(0, prefix_backend)
-
     # Load preset data
     preset_name = settings.get("AUTHENTICATION_BACKEND_PRESET")
     if (preset_list := settings.AUTHENTICATION_BACKEND_PRESETS_DATA.get(preset_name)) is not None:
         for item in preset_list:
             if item not in backends:
                 backends.append(item)
 
+    # insert prefix stuff
+    prefix_backend = "ansible_base.lib.backends.prefixed_user_auth.PrefixedUserAuthBackend"
+    if prefix_backend not in backends:
+        backend.append(prefix_backend)
+
     # deduplicate dynaconf_merge ...
     if backends.count('dynaconf_merge'):
         backends = [x for x in backends if x != 'dynconf_merge']