Task: Deny access to loginform in active sessions

src/Controller/Security/LoginController.php

@@ -2,6 +2,7 @@
 
 namespace App\Controller\Security;
 
+use App\Entity\User;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Routing\Annotation\Route;
@@ -12,6 +13,12 @@ class LoginController extends AbstractController
     #[Route('/login', name: 'app_security_login')]
     public function login(AuthenticationUtils $authenticationUtils): Response
     {
+        // redirect to default route in case of active session
+        if (null !== $user = $this->getUser()) {
+            /** @var User $user */
+            return $this->redirectToRoute($user->getDefaultRoute());
+        }
+
         // get the login error if there is one
         $error = $authenticationUtils->getLastAuthenticationError();