How would you solve an interview scenario involving middleware pipeline?

If authenticated requests always appear anonymous, verify that UseAuthentication runs before UseAuthorization and before protected endpoints execute.