SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

So instead of using `verifySession`, you can use `getSession` like so:
```
import supertokens from "supertokens-node";
import {getSession} from "supertokens-node/recipe/sessions";

let session;
try {
  session = await getSession(req, res);
} catch (err) {
  if (supertokens.Error.isErrorFromSuperTokens(err) && err.type !== "GENERAL_ERROR") {
    if (err.type === "TRY_REFRESH_TOKEN") {
       supertokens.errorHandler()(err, req, res, () => {})
    } else {
       // unauthorised error. We let the API run to allow anonymous users
    }
  } else {
    throw err;
  }
}

if (session === undefined) {
   // user is anonymous
} else {
   // user is logged in
}
```