mirror of
https://github.com/better-auth/better-auth.git
synced 2026-10-20 20:26:55 -05:00
Claude
cf56e27a5d
Clarify that enableSessionForAPIKeys creates mock sessions (not real database-stored sessions) with important limitations: - Mock sessions don't include dynamically computed properties - Admin plugin's adminUserIds won't set role to admin in mock sessions - Plugin hooks may not fire as expected - Security risk if API key is leaked Added detailed documentation explaining how mock sessions work, their limitations, and guidance on when to use this feature vs alternatives. Closes #7312