diff --git a/security/form_login_setup.rst b/security/form_login_setup.rst
index dafbc783dca..fcdf4d9385e 100644
--- a/security/form_login_setup.rst
+++ b/security/form_login_setup.rst
@@ -453,7 +453,11 @@ whenever the user browses a page::
         public function onKernelRequest(RequestEvent $event): void
         {
             $request = $event->getRequest();
-            if (!$event->isMasterRequest() || $request->isXmlHttpRequest()) {
+            if (
+                !$event->isMasterRequest()
+                || $request->isXmlHttpRequest()
+                || 'app_login' === $request->attributes->get('_route')
+            ) {
                 return;
             }