As an addition, because I got here with a similar issue: Don't forget to make your guards request scoped, if your injecting request scoped services.