为什么在Symfony 5.1.3中access_control规则对我不起作用？

Question

由于某种原因，尽管存在access_control规则，但请求仍通过JwtAuthenticator进行。 令牌过期时引发异常。

我有防火墙：

enable_authenticator_manager: true

providers:
    # used to reload user from session & other features (e.g. switch_user)
    app_user_provider:
        entity:
            class: App\Entity\User
            property: email

firewalls:
    dev:
        pattern: ^/(_(profiler|wdt)|css|images|js)/
        security: false
    main:
        pattern: ^/
        provider: app_user_provider
        stateless: true
        custom_authenticators:
            - App\Security\LoginAuthenticator
            - App\Security\JwtAuthenticator
        user_checker: App\Security\UserChecker
        entry_point: App\Security\LoginAuthenticationEntryPoint
        http_basic:
            realm: Secured Area
access_control:
    - { path: ^/v1/users/login, roles: PUBLIC_ACCESS }
    - { path: ^/v1/users/register, roles: PUBLIC_ACCESS }
    - { path: ^/log, roles: PUBLIC_ACCESS }

JwtAuthenticator：

...public function supports(Request $request): ?bool
{
   return $request->headers->get("X-AUTH-TOKEN");
}...

控制器：

namespace App\Controller;

use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\Routing\Annotation\Route;

class LogController extends AbstractController
{
    /**
     * @Route("/log", name="log")
     */
    public function index()
    {
        return $this->render('log/index.html.twig', [
            'controller_name' => 'LogController',
        ]);
    }
}