Are you using the session verification guard in nest JS as explained in the docs? https://supertokens.com/docs/thirdpartyemailpassword/nestjs/guide#7-add-session-verification-guard