diff --git a/src/main/java/org/leolo/nrapi/AuthFilter.java b/src/main/java/org/leolo/nrapi/AuthFilter.java
index a9ce4d1..52607cf 100644
--- a/src/main/java/org/leolo/nrapi/AuthFilter.java
+++ b/src/main/java/org/leolo/nrapi/AuthFilter.java
@@ -119,8 +119,8 @@ public class AuthFilter implements Filter {
                 userId = TokenStore.getInstance().getUserIdForToken(token);
             }
             if(authResult) {
-                filterChain.doFilter(servletRequest, servletResponse);
                 servletRequest.setAttribute(Constants.REQ_ATTR_USER_ID, userId);
+                filterChain.doFilter(servletRequest, servletResponse);
             }else{
                 log.warn("{} is not authorized to use the system", ip);
                 ((HttpServletResponse)servletResponse).sendError(403);