TokenAuthenticationMiddleware.php

<?php

interface RequestAuthorizer
{
  public function __construct(AccessToken $accessToken);
  public function isAuthorized(RequestInterface $request): bool;
  public function authorize(RequestInterface $request): void;
}

class AccessTokenMiddleware 
{
  /** @var RequestAuthorizer **/
  private $tokenService;
  
  public function __invoke(callable $handler)
  {
      return function (RequestInterface $request, array $options) use ($handler) {
          $request = $this->authorizeRequest($request);
          return $handler($request, $options);
      };
  }
  
  private function authorizeRequest(RequestInterface $request): RequestInterface
  {
    if ($this->shouldSkipAuthorizationForUrl($uri) 
        || $this->tokenService->isAuthorized($request, $this->accessToken) // this is what changed
    ) {
      return $request;
    } else {
      $this->checkAccessToken();
      return $this->tokenService->authorize($request, $this->accessToken); // this also changed
    }
  }
}