diff --git a/CHANGELOG.md b/CHANGELOG.md
index a6fb93362a6..0f55122dd42 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,10 @@
 # Changelog
 =======
 
+## 3.0.0-rc.3
+
+* Symfony: removed the `$exceptionOnNoToken` parameter in `ResourceAccessChecker::__construct()` (#4900)
+
 ## 3.0.0-beta.2
 
 * ExpressionLanguage: deprecated class `ApiPlatform\Symfony\Security\ExpressionLanguage` has been removed in favor of `Symfony\Component\Security\Core\Authorization\ExpressionLanguage`.
diff --git a/src/Symfony/Security/ResourceAccessChecker.php b/src/Symfony/Security/ResourceAccessChecker.php
index e1bd3586079..6fe34496855 100644
--- a/src/Symfony/Security/ResourceAccessChecker.php
+++ b/src/Symfony/Security/ResourceAccessChecker.php
@@ -28,7 +28,7 @@
  */
 final class ResourceAccessChecker implements ResourceAccessCheckerInterface
 {
-    public function __construct(private readonly ?ExpressionLanguage $expressionLanguage = null, private readonly ?AuthenticationTrustResolverInterface $authenticationTrustResolver = null, private readonly ?RoleHierarchyInterface $roleHierarchy = null, private readonly ?TokenStorageInterface $tokenStorage = null, private readonly ?AuthorizationCheckerInterface $authorizationChecker = null, private readonly bool $exceptionOnNoToken = true)
+    public function __construct(private readonly ?ExpressionLanguage $expressionLanguage = null, private readonly ?AuthenticationTrustResolverInterface $authenticationTrustResolver = null, private readonly ?RoleHierarchyInterface $roleHierarchy = null, private readonly ?TokenStorageInterface $tokenStorage = null, private readonly ?AuthorizationCheckerInterface $authorizationChecker = null)
     {
     }
 
@@ -38,13 +38,7 @@ public function isGranted(string $resourceClass, string $expression, array $extr
             throw new \LogicException('The "symfony/security" library must be installed to use the "security" attribute.');
         }
         if (null === $token = $this->tokenStorage->getToken()) {
-            if ($this->exceptionOnNoToken) {
-                throw new \LogicException('The current token must be set to use the "security" attribute (is the URL behind a firewall?).');
-            }
-
-            if (class_exists(NullToken::class)) {
-                $token = new NullToken();
-            }
+            $token = new NullToken();
         }
         if (null === $this->expressionLanguage) {
             throw new \LogicException('The "symfony/expression-language" library must be installed to use the "security" attribute.');