Calling await Session.getSession throws exception if there is no session. I was expecting it will return undefined. Is this a bug?

this is expected. If you want to make it return undefined, you can pass in sessinoRequired: false in the options arg

I tried that, here is the code:

const session = await Session.getSession(
          input.options.req,
          input.options.res,
          {
            sessionRequired: false,
            overrideGlobalClaimValidators: () => [], // We remove claim checking here, since this needs to be callable without the second factor completed
          },
        );

This is 2fa example from supertokens website