diff --git a/packages/backend-app-api/src/services/implementations/auth/authServiceFactory.ts b/packages/backend-app-api/src/services/implementations/auth/authServiceFactory.ts
index f2b9bb7cd4..e0ecf16092 100644
--- a/packages/backend-app-api/src/services/implementations/auth/authServiceFactory.ts
+++ b/packages/backend-app-api/src/services/implementations/auth/authServiceFactory.ts
@@ -115,11 +115,6 @@ class DefaultAuthService implements AuthService {
     private readonly pluginTokenHandler: PluginTokenHandler,
   ) {}
 
-  async listPublicServiceKeys(): Promise<{ keys: JsonObject[] }> {
-    const { keys } = await this.publicKeyStore.listKeys();
-    return { keys: keys.map(({ key }) => key) };
-  }
-
   // allowLimitedAccess is currently ignored, since we currently always use the full user tokens
   async authenticate(token: string): Promise<BackstageCredentials> {
     const pluginResult = await this.pluginTokenHandler.verifyToken(token);
@@ -235,6 +230,11 @@ class DefaultAuthService implements AuthService {
     return this.userTokenHandler.createLimitedUserToken(backstageToken);
   }
 
+  async listPublicServiceKeys(): Promise<{ keys: JsonObject[] }> {
+    const { keys } = await this.publicKeyStore.listKeys();
+    return { keys: keys.map(({ key }) => key) };
+  }
+
   #getJwtExpiration(token: string) {
     const { exp } = decodeJwt(token);
     if (!exp) {