run the public share auth middleware after the create home middleware

The x-access-token for public shares is scoped for only the share. That means create home would fail because the token is not valid.

proxy/pkg/command/server.go

@@ -218,10 +218,6 @@ func loadMiddlewares(ctx context.Context, logger log.Logger, cfg *config.Config)
 			middleware.OIDCIss(cfg.OIDC.Issuer),
 			middleware.CredentialsByUserAgent(cfg.Reva.Middleware.Auth.CredentialsByUserAgent),
 		),
-		middleware.PublicShareAuth(
-			middleware.Logger(logger),
-			middleware.RevaGatewayClient(revaClient),
-		),
 		middleware.SignedURLAuth(
 			middleware.Logger(logger),
 			middleware.PreSignedURLConfig(cfg.PreSignedURL),
@@ -249,6 +245,10 @@ func loadMiddlewares(ctx context.Context, logger log.Logger, cfg *config.Config)
 			middleware.TokenManagerConfig(cfg.TokenManager),
 			middleware.RevaGatewayClient(revaClient),
 		),
+		middleware.PublicShareAuth(
+			middleware.Logger(logger),
+			middleware.RevaGatewayClient(revaClient),
+		),
 	)
 }