Can an Admin (API Key) create a session for a user?

I have a trusted 3rd party that provides me an external ID that maps to my users. What I want to do is have that request create a client that is a specific user. The reason is so it still respects all the database rules instead of running the request with API keys. Is this possible?.

I can sign new JWTs but i'd rather have my appwrite signing key in one place (on my appwrite server)

Server SDK can't create sessions at the moment. I'm pretty sure there's an issue somewhere requesting this type of impersonation feature

Do you know if thats a technical or a security issue?

Technical.

Sort of security because that allows any developer/admin to impersonate a user

Makes sense. It would be cool to have the option exposed via an API key permission but Its kind of a weird case. Thanks 👍

even i want to create sessions for my users