hectorsanchez
I'm not a dev so could be incorrect here, but a session appears to happen merely by authenticating and receiving a token. That's the first thing the API docs show:
http://flarum.org/docs/api/
If I were to send a curl request to obtain a token, I could send subsequent curl requests specific to my user as long as this token was sent back with each request. Does that make sense to you?
I don't know if a "session" has more complexity than this. It may be the case.