Validate and remove User Session on backend using Admin Client / API key

Hey all,

I am a little confused about the correct workflow. I am using .NET (Appwrite v1.7.4, latest working official .net sdk library). I understand there are client and server endpoints (using session secret or api key). However trying to validate the session (based on the received session secret) does only work using the Client endpoint ("Account", auth with session secret)? The problem is that this endpoint is rate limited and my application is supposed to handle everything from the backend.

Am I missing something? Currently my workflow is like this

// Create / login by mail
var accountService = new Account(appwriteAdminClient.Client);
var token = await accountService.CreateEmailToken(ID.Unique(), request.UserEmail);

// Authenticate by mail received
var accountService = new Account(appwriteAdminClient.Client);
var session = await accountService.CreateSession(request.UserId, request.Secret); // Use mail OTP

// On API calls check session validity
appwriteSessionClient.Client.SetSession(sessionSecret.ToString());
var accountService = new Account(appwriteSessionClient.Client);
var user = await accountService.Get();

The appwriteSessionClient is newly instantiated whenever used, the appwriteAdminClient is a re-used singleton instance.

Validate and remove User Session on backend using Admin Client / API key

It seems one can use the Account with ApiKey. At least partially? However doing so I either need to do this using the Session authentication to send an email (which is rate limit) or I use the Api Key authentication which only allows me one user to be created (for some reason, I even tried instantiating the Appwrite Client whenever I call my API to access Appwrite features, works as soon as I logout of the first user).

Using Users service does not provide options to send mail OTPs like Account. Do I have to use Users and implement my own OTP (Secret) handling for login validation? Because Account is "broken" when used from the backend?