### Apache Airflow version

2.5.3

### What happened

It seems that the order_by parameters is not used when calling dags list with the rest api

The following two commands returns the same results which should not be possible cause one is ascending and the other descending 

curl -X 'GET'   'http://<server_name>:<port>/api/v1/dags?limit=100&order_by=dag_id&only_active=true'  -H 'accept: application/json'

curl -X 'GET'   'http://<server_name>:<port>/api/v1/dags?limit=100&order_by=-dag_id&only_active=true'  -H 'accept: application/json'


by the way, giving an incorrect field name doesn't throw an error

### What you think should happen instead

_No response_

### How to reproduce

The following two commands returns the same results
curl -X 'GET'   'http://<server_name>:<port>/api/v1/dags?limit=100&order_by=-dag_id&only_active=true'  -H 'accept: application/json'

curl -X 'GET'   'http://<server_name>:<port>/api/v1/dags?limit=100&order_by=dag_id&only_active=true'  -H 'accept: application/json'

Same problem is visible with the swagger ui

### Operating System

PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" NAME="Debian GNU/Linux" VERSION_ID="11" VERSION="11 (bullseye)" VERSION_CODENAME=bullseye ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/"

### Versions of Apache Airflow Providers

apache-airflow-providers-common-sql==1.3.4
apache-airflow-providers-ftp==3.3.1
apache-airflow-providers-http==4.2.0
apache-airflow-providers-imap==3.1.1
apache-airflow-providers-microsoft-mssql==3.3.2
apache-airflow-providers-mysql==4.0.2
apache-airflow-providers-oracle==3.6.0
apache-airflow-providers-sqlite==3.3.1
apache-airflow-providers-vertica==3.3.1


### Deployment

Official Apache Airflow Helm Chart

### Deployment details

_No response_

### Anything else

_No response_

### Are you willing to submit PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

#
#
from __future__ import annotations
import os
import unittest.mock
from datetime import datetime
import pytest
from airflow import DAG
from airflow.api_connexion.exceptions import EXCEPTIONS_LINK_MAP
from airflow.models import DagBag, DagModel
from airflow.models.serialized_dag import SerializedDagModel
from airflow.operators.empty import EmptyOperator
from airflow.security import permissions
from airflow.utils.session import provide_session
from tests.test_utils.api_connexion_utils import assert_401, create_user, delete_user
from tests.test_utils.config import conf_vars
from tests.test_utils.db import clear_db_dags, clear_db_runs, clear_db_serialized_dags
@pytest.fixture()
def current_file_token(url_safe_serializer) -> str: