Probably an unusual thing to want, but is it currently possible to create a session for a user without them logging in?

If guess if the cookies/token doesn't land in the users browser/localstorage they have a session but are not logged in?