答案在这里

use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;

// ...

public function changeUserEmail(TokenStorageInterface $tokenStorage) {
     /* change the user email */
     $tokenStorage->setToken();
     /* choose the route to redirect to */
     return $this->redirectToRoute(/* some route choosen above */);
}

不需要使所有会话无效，例如，如果一个会话定义了多个防火墙。

在Symphony 6.2中，你可以使用logout（）方法：

use Symfony\Bundle\SecurityBundle\Security;

class SecurityController
{
    public function someAction(Security $security): Response
    {
        //  with csrf
        $response = $security->logout();

        // or without csrf
        $response = $security->logout(false);

        // ... return $response (if set) or e.g. redirect to the homepage
    }
}