diff --git a/src/Security/JWT/Extractor/ChainTokenExtractor.php b/src/Security/JWT/Extractor/ChainTokenExtractor.php
index 6255896..78469c2 100644
--- a/src/Security/JWT/Extractor/ChainTokenExtractor.php
+++ b/src/Security/JWT/Extractor/ChainTokenExtractor.php
@@ -16,9 +16,9 @@ final class ChainTokenExtractor implements PSR7TokenExtractorInterface
      */
     public function __construct(
         private iterable $tokenExtractors = [
+            new QueryTokenExtractor(),
             new CookieTokenExtractor(),
             new AuthorizationHeaderTokenExtractor(),
-            new QueryTokenExtractor(),
         ],
     ) {
     }