From 0ba89894030870dfd3e2bfaa3da7106b6a9a273a Mon Sep 17 00:00:00 2001
From: Taesu <166604494+bytaesu@users.noreply.github.com>
Date: Mon, 15 Dec 2025 16:25:29 +0900
Subject: [PATCH] fix: revert token masking in listSessions route (#6749)

---
 packages/better-auth/src/api/routes/session.ts | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/packages/better-auth/src/api/routes/session.ts b/packages/better-auth/src/api/routes/session.ts
index b284e66a26..01b23c2f5c 100644
--- a/packages/better-auth/src/api/routes/session.ts
+++ b/packages/better-auth/src/api/routes/session.ts
@@ -600,16 +600,9 @@ export const listSessions = <Option extends BetterAuthOptions>() =>
 				const sessions = await ctx.context.internalAdapter.listSessions(
 					ctx.context.session.user.id,
 				);
-				const activeSessions = sessions
-					.filter((session) => {
-						return session.expiresAt > new Date();
-					})
-					.map((session) => {
-						return {
-							...session,
-							token: "", // we don't need to return the token to the client
-						};
-					});
+				const activeSessions = sessions.filter((session) => {
+					return session.expiresAt > new Date();
+				});
 				return ctx.json(
 					activeSessions as unknown as Prettify<InferSession<Option>>[],
 				);