Prefer the gsheet token

server/kernels/kernel_handlers.py

@@ -116,21 +116,21 @@ async def init_connection(
         with self.make_session() as session:
             user: User | NonUser
             self.user_profile_image = ""
-            if auth_token:
+            if gsheet_auth_token:
+                assert gsheet_auth_token
+                user = NonUser.GSHEET
+                claims = decode_gsheet_extension_token(gsheet_auth_token)
+                self.user_id = None
+                self.user_name = f"anon-{claims.sheet_id}"
+                self.user_email = f"{self.user_name}@example.com"
+            else:
                 user = await authenticate_request(self, session, token=auth_token)
                 self.user_email = user.email
                 self.user_name = user.name
                 self.user_id = user.id
                 self.allow_other_gsheets = bool(
                     self.user_email
                 ) and self.user_email.endswith("@neptyne.com")
-            else:
-                assert gsheet_auth_token
-                user = NonUser.GSHEET
-                claims = decode_gsheet_extension_token(gsheet_auth_token)
-                self.user_id = None
-                self.user_name = f"anon-{claims.sheet_id}"
-                self.user_email = f"{self.user_name}@example.com"
 
             tyne_proxy = await self.tyne_contents_manager.get(
                 self.tyne_id, session, user, gsheet_auth_token

server/users.py

@@ -19,9 +19,10 @@
 
 
 def token_from_headers(request_handler: web.RequestHandler) -> str | None:
+    header = request_handler.request.headers.get("X-Neptyne-GSheet-Auth-Token")
+    if header:
+        return header
     header = request_handler.request.headers.get("Authorization")
-    if not header:
-        return request_handler.request.headers.get("X-Neptyne-GSheet-Auth-Token")
 
     parts = header.split(" ")
     if len(parts) != 2 or parts[0].lower() != "bearer":