hasHeader('Authorization')) { return $next($request); } foreach (self::COOKIE_NAMES as $cookieName) { $token = $request->cookie($cookieName); if ($token) { $request->headers->set('Authorization', 'Bearer ' . $token); break; } } return $next($request); } }