core-bundle/src/Security/Authentication/Provider/AuthenticationProvider.php
public function checkAuthentication(UserInterface $user, UsernamePasswordToken $token): void
    {
        if (!$user instanceof User) {
            parent::checkAuthentication($user, $token);

            return;
        }

        try {
            parent::checkAuthentication($user, $token);
        } catch (AuthenticationException $exception) {
            if (!$exception instanceof BadCredentialsException) {
                throw $exception;
            }

            if (!$this->triggerCheckCredentialsHook($user, $token)) {
                throw $this->onBadCredentials($user, $exception);
            }
        }

        $user->loginCount = $this->options['login_attempts'];
        $user->save();
    }
public function checkAuthentication(UserInterface $user, UsernamePasswordToken $token): void
    {
        if (!$user instanceof User) {
            parent::checkAuthentication($user, $token);

            return;
        }

        try {
            parent::checkAuthentication($user, $token);
        } catch (AuthenticationException $exception) {
            if (!$exception instanceof BadCredentialsException) {
                throw $exception;
            }

            if (!$this->triggerCheckCredentialsHook($user, $token)) {
                throw $this->onBadCredentials($user, $exception);
            }
        }

        $user->loginCount = $this->options['login_attempts'];
        $user->save();
    }
{@inheritdoc}