#910 - Don’t try to get session when it’s stateless (#911)

Co-authored-by: Michi Hoffmann <[email protected]>

Author: deluxetom

src/EventListener/LoginListener.php

@@ -47,7 +47,11 @@ public function __construct(HubInterface $hub, ?TokenStorageInterface $tokenStor
      */
     public function handleKernelRequestEvent(RequestEvent $event): void
     {
-        if (null === $this->tokenStorage || !$this->isMainRequest($event)) {
+        if (
+            null === $this->tokenStorage
+            || !$this->isMainRequest($event)
+            || $event->getRequest()->attributes->get('_stateless')
+        ) {
             return;
         }
 

tests/EventListener/LoginListenerTest.php

@@ -298,6 +298,18 @@ public function __toString(): string
         }
     }
 
+    public function testHandleKernelRequestEventDoesNothingIfRequestIsForStatelessRoute(): void
+    {
+        $this->tokenStorage->expects($this->never())
+            ->method('getToken');
+
+        $this->listener->handleKernelRequestEvent(new RequestEvent(
+            $this->createMock(HttpKernelInterface::class),
+            new Request([], [], ['_stateless' => true]),
+            HttpKernelInterface::SUB_REQUEST
+        ));
+    }
+
     public function testHandleKernelRequestEventDoesNothingIfRequestIsNotMain(): void
     {
         $this->tokenStorage->expects($this->never())