I don't see all your config files, but you should check this:
config/routes.yaml you have to remove api_login_check. This route is not yours, you don't have to implement itapi_login_check exists in config/routes/security.yaml. Probably it is, but if no - just copy this part from your config/routes.yamllogin firewall is the first one in the list. It's really important. Otherwise Symfony will try to find a custom controller to match api_login_check route.config/bundles.php. There should be a line likeLexik\Bundle\JWTAuthenticationBundle\LexikJWTAuthenticationBundle::class => ['all' => true],