diff --git a/endpoints/api/__init__.py b/endpoints/api/__init__.py
index f45ac1127..3e02e923f 100644
--- a/endpoints/api/__init__.py
+++ b/endpoints/api/__init__.py
@@ -25,8 +25,8 @@ logger = logging.getLogger(__name__)
 api_bp = Blueprint('api', __name__)
 api = Api()
 api.init_app(api_bp)
-api.decorators = [process_oauth,
-                  csrf_protect,
+api.decorators = [csrf_protect,
+                  process_oauth,
                   crossdomain(origin='*', headers=['Authorization', 'Content-Type'])]