*/ final readonly class MeProvider implements ProviderInterface { public function __construct( private Security $security, ) {} public function provide(Operation $operation, array $uriVariables = [], array $context = []): User { $user = $this->security->getUser(); if (!$user instanceof User) { throw new AccessDeniedHttpException('User not authenticated.'); } return $user; } }