Most objects in javascript inherit from Object; it's possible to intentionally create objects that inherit from nothing (i.e., null), and therefore they won't have any of the typical methods you'd expect to live on the object.

You would normally know if your code was doing this, so the object might be something passed to you from another library.

A way around the error is to call hasOwnProperty on Object explicitly, and bind it to the object, like so:

// Calls hasOwnProperty on queryData, even if queryData has

// no prototype:

console.log(Object.hasOwnProperty.bind(queryData)('session'));

EDIT: Just editing to add an opinion, which is that a much better line for your purposes is the simple truthy check if (queryData.session) {. The vagueness of this check is a strength when what you're asking is did a session get passed? - if session is null, undefined, false, empty string, or the key is missing altogether, the answer is clearly no.