Token was deauthenticated Error Symfony 4

security/entity_provider.rst

@@ -42,12 +42,14 @@ with the following fields: ``id``, ``username``, ``password``,
 
     use Doctrine\ORM\Mapping as ORM;
     use Symfony\Component\Security\Core\User\UserInterface;
+    use Serializable;
+    use Symfony\Component\Security\Core\User\EquatableInterface;
 
     /**
      * @ORM\Table(name="app_users")
      * @ORM\Entity(repositoryClass="App\Repository\UserRepository")
      */
-    class User implements UserInterface, \Serializable
+    class User implements UserInterface, Serializable, EquatableInterface
     {
         /**
          * @ORM\Column(type="integer")
@@ -108,13 +110,13 @@ with the following fields: ``id``, ``username``, ``password``,
         public function eraseCredentials()
         {
         }
-
+        
         /** @see \Serializable::serialize() */
         public function serialize()
         {
             return serialize(array(
                 $this->id,
-                $this->username,
+                $this->username, // you should use $this->email if you don't use username but email to log user
                 $this->password,
                 // see section on salt below
                 // $this->salt,
@@ -126,11 +128,35 @@ with the following fields: ``id``, ``username``, ``password``,
         {
             list (
                 $this->id,
-                $this->username,
+                $this->username, // you should use $this->email if you don't use username but email to log user
                 $this->password,
                 // see section on salt below
                 // $this->salt
-            ) = unserialize($serialized, ['allowed_classes' => false]);
+                ) = unserialize($serialized, ['allowed_classes' => false]);
+        }
+
+        /**
+         * if you want to keep the control on what attributes are compared at each request to know if user have changed,
+         * you can implement Equatable interface and the method isEqualTo and add all attributes you want compare.
+         * The equality comparison should neither be done by referential equality
+         * nor by comparing identities (i.e. getId() === getId()).
+         *
+         * However, you do not need to compare every attribute, but only those that
+         * are relevant for assessing whether re-authentication is required.
+         *
+         * @return bool
+         */
+        public function isEqualTo(UserInterface $user)
+        {
+            if ($this->password !== $user->getPassword()) {
+                return false;
+            }
+
+            if ($this->username !== $user->getUsername()) {
+                return false;
+            }
+
+            return true;
         }
     }