2 replies

/get-session returns 200 even if cookie is invalid

Core

Basically instead off returning an error code like 401 it returns 200 with a body of

null

null

/get-session returns 200 even if cookie is invalid - Better Auth