You're intervening deep into the event stack of the framework. kernel level event's have a higher priority and are getting executed first.

Try:

#[AsEventListener(event: OAuth2Events::TOKEN_REQUEST_RESOLVE, priority: 256)]

See the following: https://symfony.com/doc/current/event_dispatcher.html#creating-an-event-listener