From 689ad736a844c8f76bec07006eef8d542709c654 Mon Sep 17 00:00:00 2001
From: Piotr <rn0@users.noreply.github.com>
Date: Tue, 4 Aug 2026 09:38:34 +0200
Subject: [PATCH] Check firewall configuration before accessing token storage.
 This change prevents sessions from starting on paths not covered by specified
 firewall.

---
 EventListener/EnforcePasswordChangeListener.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/EventListener/EnforcePasswordChangeListener.php b/EventListener/EnforcePasswordChangeListener.php
index 5b56828..c76bb07 100644
--- a/EventListener/EnforcePasswordChangeListener.php
+++ b/EventListener/EnforcePasswordChangeListener.php
@@ -70,12 +70,12 @@ public function onKernelRequest(RequestEvent $event): void
             return;
         }
 
-        $token = $this->tokenStorage->getToken();
-        if (null === $token) {
+        if (false === $this->isConfiguredFirewall($event->getRequest())) {
             return;
         }
 
-        if (false === $this->isConfiguredFirewall($event->getRequest())) {
+        $token = $this->tokenStorage->getToken();
+        if (null === $token) {
             return;
         }