@supertokens-plugins/rownd-nodejs 0.3.0-beta.4 → 0.3.0-beta.6

package/dist/bulkMigrate.js

@@ -44,7 +44,7 @@ var import_supertokens_node = __toESM(require("supertokens-node"));
 
 // src/constants.ts
 var GUEST_AUTH_METHOD_ID = "guest";
-var ANONYMOUS_AUTH_METHOD_ID = "anonymous";
+var INSTANT_AUTH_METHOD_ID = "instant";
 
 // src/rownd-compatibility.ts
 var IDENTITY_USER_DATA_FIELDS = /* @__PURE__ */ new Set([
@@ -104,7 +104,7 @@ function mapRowndUserToSuperTokens(rowndUser) {
   }
   let authLevel = rowndUser.auth_level;
   if (loginMethods.length === 0) {
-    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : ANONYMOUS_AUTH_METHOD_ID;
+    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : INSTANT_AUTH_METHOD_ID;
     if (!authLevel) authLevel = thirdPartyId;
     loginMethods.push({
       recipeId: "thirdparty",

package/dist/index.d.mts

@@ -801,7 +801,7 @@ declare const PLUGIN_SDK_VERSION: string[];
 declare const HANDLE_BASE_PATH = "/plugin/rownd";
 declare const PUBLIC_TENANT_ID = "public";
 declare const GUEST_AUTH_METHOD_ID = "guest";
-declare const ANONYMOUS_AUTH_METHOD_ID = "anonymous";
+declare const INSTANT_AUTH_METHOD_ID = "instant";
 declare const ROWND_JWT_CLAIMS: {
     readonly AppUserId: "https://auth.rownd.io/app_user_id";
     readonly IsVerifiedUser: "https://auth.rownd.io/is_verified_user";
@@ -832,4 +832,4 @@ declare const _default: {
     init: (config: RowndPluginConfig) => supertokens_node.SuperTokensPlugin;
 };
 
-export { ANONYMOUS_AUTH_METHOD_ID, DEFAULT_ROWND_SCHEMA, GUEST_AUTH_METHOD_ID, HANDLE_BASE_PATH, HUB_LOGIN_PAGE_PATH, HUB_VERIFY_EMAIL_PAGE_PATH, type IRowndClient, type MigrationResponse, PLUGIN_ID, PLUGIN_SDK_VERSION, PLUGIN_VERSION, PUBLIC_TENANT_ID, ROWND_JWT_CLAIMS, ROWND_PLUGIN_ERROR_MESSAGES, type RowndAppConfigInput, type RowndAuthConfig, type RowndBranding, type RowndClientDomains, type RowndCustomContent, type RowndLegal, type RowndPluginConfig, RowndPluginError, type RowndPluginErrorType, type RowndPluginNormalisedConfig, type RowndProfileConfig, type RowndSchema, type RowndSchemaField, type RowndSignInMethod, type RowndSubBrandConfigInput, type RowndTelemetryClient, type RowndTelemetryConfig, type RowndTelemetryEvent, type RowndUser, type RowndUserMetadata, type SuperTokensUserImport, _default as default, getRowndClient, init, setRowndClient };
+export { DEFAULT_ROWND_SCHEMA, GUEST_AUTH_METHOD_ID, HANDLE_BASE_PATH, HUB_LOGIN_PAGE_PATH, HUB_VERIFY_EMAIL_PAGE_PATH, INSTANT_AUTH_METHOD_ID, type IRowndClient, type MigrationResponse, PLUGIN_ID, PLUGIN_SDK_VERSION, PLUGIN_VERSION, PUBLIC_TENANT_ID, ROWND_JWT_CLAIMS, ROWND_PLUGIN_ERROR_MESSAGES, type RowndAppConfigInput, type RowndAuthConfig, type RowndBranding, type RowndClientDomains, type RowndCustomContent, type RowndLegal, type RowndPluginConfig, RowndPluginError, type RowndPluginErrorType, type RowndPluginNormalisedConfig, type RowndProfileConfig, type RowndSchema, type RowndSchemaField, type RowndSignInMethod, type RowndSubBrandConfigInput, type RowndTelemetryClient, type RowndTelemetryConfig, type RowndTelemetryEvent, type RowndUser, type RowndUserMetadata, type SuperTokensUserImport, _default as default, getRowndClient, init, setRowndClient };

package/dist/index.d.ts

@@ -801,7 +801,7 @@ declare const PLUGIN_SDK_VERSION: string[];
 declare const HANDLE_BASE_PATH = "/plugin/rownd";
 declare const PUBLIC_TENANT_ID = "public";
 declare const GUEST_AUTH_METHOD_ID = "guest";
-declare const ANONYMOUS_AUTH_METHOD_ID = "anonymous";
+declare const INSTANT_AUTH_METHOD_ID = "instant";
 declare const ROWND_JWT_CLAIMS: {
     readonly AppUserId: "https://auth.rownd.io/app_user_id";
     readonly IsVerifiedUser: "https://auth.rownd.io/is_verified_user";
@@ -832,4 +832,4 @@ declare const _default: {
     init: (config: RowndPluginConfig) => supertokens_node.SuperTokensPlugin;
 };
 
-export { ANONYMOUS_AUTH_METHOD_ID, DEFAULT_ROWND_SCHEMA, GUEST_AUTH_METHOD_ID, HANDLE_BASE_PATH, HUB_LOGIN_PAGE_PATH, HUB_VERIFY_EMAIL_PAGE_PATH, type IRowndClient, type MigrationResponse, PLUGIN_ID, PLUGIN_SDK_VERSION, PLUGIN_VERSION, PUBLIC_TENANT_ID, ROWND_JWT_CLAIMS, ROWND_PLUGIN_ERROR_MESSAGES, type RowndAppConfigInput, type RowndAuthConfig, type RowndBranding, type RowndClientDomains, type RowndCustomContent, type RowndLegal, type RowndPluginConfig, RowndPluginError, type RowndPluginErrorType, type RowndPluginNormalisedConfig, type RowndProfileConfig, type RowndSchema, type RowndSchemaField, type RowndSignInMethod, type RowndSubBrandConfigInput, type RowndTelemetryClient, type RowndTelemetryConfig, type RowndTelemetryEvent, type RowndUser, type RowndUserMetadata, type SuperTokensUserImport, _default as default, getRowndClient, init, setRowndClient };
+export { DEFAULT_ROWND_SCHEMA, GUEST_AUTH_METHOD_ID, HANDLE_BASE_PATH, HUB_LOGIN_PAGE_PATH, HUB_VERIFY_EMAIL_PAGE_PATH, INSTANT_AUTH_METHOD_ID, type IRowndClient, type MigrationResponse, PLUGIN_ID, PLUGIN_SDK_VERSION, PLUGIN_VERSION, PUBLIC_TENANT_ID, ROWND_JWT_CLAIMS, ROWND_PLUGIN_ERROR_MESSAGES, type RowndAppConfigInput, type RowndAuthConfig, type RowndBranding, type RowndClientDomains, type RowndCustomContent, type RowndLegal, type RowndPluginConfig, RowndPluginError, type RowndPluginErrorType, type RowndPluginNormalisedConfig, type RowndProfileConfig, type RowndSchema, type RowndSchemaField, type RowndSignInMethod, type RowndSubBrandConfigInput, type RowndTelemetryClient, type RowndTelemetryConfig, type RowndTelemetryEvent, type RowndUser, type RowndUserMetadata, type SuperTokensUserImport, _default as default, getRowndClient, init, setRowndClient };

package/dist/index.js

@@ -267,12 +267,12 @@ var require_supports_color = __commonJS({
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
-  ANONYMOUS_AUTH_METHOD_ID: () => ANONYMOUS_AUTH_METHOD_ID,
   DEFAULT_ROWND_SCHEMA: () => DEFAULT_ROWND_SCHEMA,
   GUEST_AUTH_METHOD_ID: () => GUEST_AUTH_METHOD_ID,
   HANDLE_BASE_PATH: () => HANDLE_BASE_PATH,
   HUB_LOGIN_PAGE_PATH: () => HUB_LOGIN_PAGE_PATH,
   HUB_VERIFY_EMAIL_PAGE_PATH: () => HUB_VERIFY_EMAIL_PAGE_PATH,
+  INSTANT_AUTH_METHOD_ID: () => INSTANT_AUTH_METHOD_ID,
   PLUGIN_ID: () => PLUGIN_ID,
   PLUGIN_SDK_VERSION: () => PLUGIN_SDK_VERSION,
   PLUGIN_VERSION: () => PLUGIN_VERSION,
@@ -690,7 +690,7 @@ var PLUGIN_SDK_VERSION = ["23.0.0", "23.0.1", ">=23.0.1"];
 var HANDLE_BASE_PATH = "/plugin/rownd";
 var PUBLIC_TENANT_ID = "public";
 var GUEST_AUTH_METHOD_ID = "guest";
-var ANONYMOUS_AUTH_METHOD_ID = "anonymous";
+var INSTANT_AUTH_METHOD_ID = "instant";
 var ROWND_JWT_CLAIMS = {
   AppUserId: "https://auth.rownd.io/app_user_id",
   IsVerifiedUser: "https://auth.rownd.io/is_verified_user",
@@ -1408,7 +1408,7 @@ function mapRowndUserToSuperTokens(rowndUser) {
   }
   let authLevel = rowndUser.auth_level;
   if (loginMethods.length === 0) {
-    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : ANONYMOUS_AUTH_METHOD_ID;
+    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : INSTANT_AUTH_METHOD_ID;
     if (!authLevel) authLevel = thirdPartyId;
     loginMethods.push({
       recipeId: "thirdparty",
@@ -1480,11 +1480,10 @@ function getAnonymousId(userId, user, metadata) {
   if (typeof originalAnonymousId === "string") {
     return originalAnonymousId;
   }
-  const anonymousMethod = user?.loginMethods.find((loginMethod) => {
-    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === ANONYMOUS_AUTH_METHOD_ID;
+  const guestMethod = user?.loginMethods.find((loginMethod) => {
+    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === GUEST_AUTH_METHOD_ID;
   });
-  const thirdPartyUserId = anonymousMethod ? getThirdPartyUserId(anonymousMethod) : void 0;
-  return thirdPartyUserId || (hasAnonymousLoginMethod(user) ? `anon_${userId}` : void 0);
+  return guestMethod ? `anon_${user?.id || userId}` : void 0;
 }
 function buildRowndSessionClaimPayload(input) {
   const currentPayload = input.currentPayload ?? {};
@@ -1501,7 +1500,7 @@ function buildRowndSessionClaimPayload(input) {
     currentPayload,
     input.metadata
   );
-  const isAnonymous = currentPayload.is_anonymous === true || authLevel === GUEST_AUTH_METHOD_ID || authLevel === ANONYMOUS_AUTH_METHOD_ID;
+  const isAnonymous = currentPayload.is_anonymous === true || [GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(authLevel);
   const anonymousId = getAnonymousId(input.userId, input.user, input.metadata);
   const isVerifiedUser = authLevel !== "unverified";
   const audience = buildRowndAudience(currentPayload, input.appVariantId);
@@ -1515,7 +1514,7 @@ function buildRowndSessionClaimPayload(input) {
     [ROWND_JWT_CLAIMS.AppUserId]: appUserId,
     [ROWND_JWT_CLAIMS.AuthLevel]: authLevel,
     [ROWND_JWT_CLAIMS.IsVerifiedUser]: isVerifiedUser,
-    [ROWND_JWT_CLAIMS.IsAnonymous]: isAnonymous,
+    ...isAnonymous ? { [ROWND_JWT_CLAIMS.IsAnonymous]: true } : {},
     ...anonymousId ? { anonymous_id: anonymousId } : {}
   };
 }
@@ -1561,23 +1560,26 @@ function getThirdPartyUserId(method) {
   return method.thirdParty?.userId;
 }
 function getGuestAuthLevel(user) {
-  const guestMethod = user?.loginMethods.find(isGuestLoginMethod);
-  return guestMethod ? GUEST_AUTH_METHOD_ID : void 0;
-}
-function hasAnonymousLoginMethod(user) {
-  return !!user?.loginMethods.some((loginMethod) => {
-    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === ANONYMOUS_AUTH_METHOD_ID;
+  const guestMethod = user?.loginMethods.find((method) => {
+    return method.recipeId === "thirdparty" && getThirdPartyId(method) === GUEST_AUTH_METHOD_ID;
+  });
+  if (guestMethod) {
+    return GUEST_AUTH_METHOD_ID;
+  }
+  const instantMethod = user?.loginMethods.find((method) => {
+    return method.recipeId === "thirdparty" && getThirdPartyId(method) === INSTANT_AUTH_METHOD_ID;
   });
+  return instantMethod ? INSTANT_AUTH_METHOD_ID : void 0;
 }
 function hasOnlyGuestLoginMethods(user) {
   return !!user?.loginMethods.length && user.loginMethods.every(isGuestLoginMethod);
 }
 function isGuestLoginMethod(method) {
   const thirdPartyId = getThirdPartyId(method);
-  return method.recipeId === "thirdparty" && (thirdPartyId === GUEST_AUTH_METHOD_ID || thirdPartyId === ANONYMOUS_AUTH_METHOD_ID);
+  return method.recipeId === "thirdparty" && (thirdPartyId === GUEST_AUTH_METHOD_ID || thirdPartyId === INSTANT_AUTH_METHOD_ID);
 }
 function isGuestAccountInfo(input) {
-  return input?.recipeId === "thirdparty" && (input.thirdParty?.id === GUEST_AUTH_METHOD_ID || input.thirdParty?.id === ANONYMOUS_AUTH_METHOD_ID);
+  return input?.recipeId === "thirdparty" && (input.thirdParty?.id === GUEST_AUTH_METHOD_ID || input.thirdParty?.id === INSTANT_AUTH_METHOD_ID);
 }
 function doesAccountInfoMatchAuthMethod(user, accountInfo) {
   if (!user) {
@@ -1617,8 +1619,8 @@ function hasVerifiedRealLoginMethod(user) {
   });
 }
 function getEffectiveAuthLevel(user, originalAuthLevel, verifiedData) {
-  if (originalAuthLevel === ANONYMOUS_AUTH_METHOD_ID) {
-    return ANONYMOUS_AUTH_METHOD_ID;
+  if (originalAuthLevel === INSTANT_AUTH_METHOD_ID) {
+    return INSTANT_AUTH_METHOD_ID;
   }
   if (hasVerifiedRealLoginMethod(user)) {
     return "verified";
@@ -1720,7 +1722,7 @@ var RowndIsAnonymousClaim = new import_claims.BooleanClaim({
   fetchValue: async (userId) => {
     const user = await import_supertokens_node2.default.getUser(userId);
     const effectiveAuthLevel = getEffectiveAuthLevel(user);
-    return effectiveAuthLevel === GUEST_AUTH_METHOD_ID;
+    return [GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(effectiveAuthLevel);
   }
 });
 async function buildRowndSessionClaims(userId, currentPayload = {}, appVariantId) {
@@ -2116,9 +2118,9 @@ function handleGuestLogin(deps) {
       const body = parseGuestBody(await getJsonBody(req));
       const appVariantId = getRequestedAppVariantIdFromRequest(req);
       assertRowndAppVariantIsConfigured(appVariantId);
-      const thirdPartyId = body.authLevel === ANONYMOUS_AUTH_METHOD_ID ? ANONYMOUS_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
-      const thirdPartyUserId = thirdPartyId === ANONYMOUS_AUTH_METHOD_ID ? `anon_${(0, import_crypto.randomUUID)()}` : guestId;
-      const authLevel = thirdPartyId === ANONYMOUS_AUTH_METHOD_ID ? ANONYMOUS_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
+      const thirdPartyId = body.authLevel === INSTANT_AUTH_METHOD_ID ? INSTANT_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
+      const thirdPartyUserId = thirdPartyId === INSTANT_AUTH_METHOD_ID ? `anon_${(0, import_crypto.randomUUID)()}` : guestId;
+      const authLevel = thirdPartyId === INSTANT_AUTH_METHOD_ID ? INSTANT_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
       const response = await import_thirdparty.default.manuallyCreateOrUpdateUser(
         PUBLIC_TENANT_ID,
         thirdPartyId,
@@ -2141,7 +2143,7 @@ function handleGuestLogin(deps) {
         {
           ...buildRowndAudience({}, appVariantId),
           auth_level: authLevel,
-          is_anonymous: true,
+          ...[GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(authLevel) ? { is_anonymous: true } : {},
           app_user_id: response.user.id
         },
         {},
@@ -2199,16 +2201,14 @@ function handleMigrate(deps) {
       if (!user) {
         const stUserImport = mapRowndUserToSuperTokens(rowndUser);
         try {
-          const importedUser = await importUser(
-            stUserImport,
-            deps.stConfig.supertokens
-          );
-          superTokensUserId = importedUser.id;
-          if (importedUser.loginMethods[0]?.recipeUserId) {
-            recipeUserId = import_supertokens_node3.default.convertToRecipeUserId(
-              importedUser.loginMethods[0].recipeUserId
-            );
+          await importUser(stUserImport, deps.stConfig.supertokens);
+          clearSuperTokensCoreCallCache(userContext);
+          user = await import_supertokens_node3.default.getUser(rowndUserId, userContext);
+          if (!user) {
+            throw new Error("Imported user could not be resolved");
           }
+          superTokensUserId = user.id;
+          recipeUserId = user.loginMethods[0]?.recipeUserId;
         } catch (err) {
           user = await import_supertokens_node3.default.getUser(rowndUserId, userContext);
           if (!user) {
@@ -2274,6 +2274,12 @@ function handleMigrate(deps) {
     }
   };
 }
+function clearSuperTokensCoreCallCache(userContext) {
+  const cacheContext = userContext;
+  if (cacheContext._default?.coreCallCache) {
+    cacheContext._default.coreCallCache = {};
+  }
+}
 function handleGetUser() {
   return async (_req, _res, session) => {
     const user = await getUserById(session.getUserId());
@@ -2875,12 +2881,12 @@ function validateClientDomainUrl(key, value) {
 var index_default = { init };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  ANONYMOUS_AUTH_METHOD_ID,
   DEFAULT_ROWND_SCHEMA,
   GUEST_AUTH_METHOD_ID,
   HANDLE_BASE_PATH,
   HUB_LOGIN_PAGE_PATH,
   HUB_VERIFY_EMAIL_PAGE_PATH,
+  INSTANT_AUTH_METHOD_ID,
   PLUGIN_ID,
   PLUGIN_SDK_VERSION,
   PLUGIN_VERSION,

package/dist/index.mjs

@@ -667,7 +667,7 @@ var PLUGIN_SDK_VERSION = ["23.0.0", "23.0.1", ">=23.0.1"];
 var HANDLE_BASE_PATH = "/plugin/rownd";
 var PUBLIC_TENANT_ID = "public";
 var GUEST_AUTH_METHOD_ID = "guest";
-var ANONYMOUS_AUTH_METHOD_ID = "anonymous";
+var INSTANT_AUTH_METHOD_ID = "instant";
 var ROWND_JWT_CLAIMS = {
   AppUserId: "https://auth.rownd.io/app_user_id",
   IsVerifiedUser: "https://auth.rownd.io/is_verified_user",
@@ -1385,7 +1385,7 @@ function mapRowndUserToSuperTokens(rowndUser) {
   }
   let authLevel = rowndUser.auth_level;
   if (loginMethods.length === 0) {
-    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : ANONYMOUS_AUTH_METHOD_ID;
+    const thirdPartyId = authLevel === GUEST_AUTH_METHOD_ID ? GUEST_AUTH_METHOD_ID : INSTANT_AUTH_METHOD_ID;
     if (!authLevel) authLevel = thirdPartyId;
     loginMethods.push({
       recipeId: "thirdparty",
@@ -1457,11 +1457,10 @@ function getAnonymousId(userId, user, metadata) {
   if (typeof originalAnonymousId === "string") {
     return originalAnonymousId;
   }
-  const anonymousMethod = user?.loginMethods.find((loginMethod) => {
-    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === ANONYMOUS_AUTH_METHOD_ID;
+  const guestMethod = user?.loginMethods.find((loginMethod) => {
+    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === GUEST_AUTH_METHOD_ID;
   });
-  const thirdPartyUserId = anonymousMethod ? getThirdPartyUserId(anonymousMethod) : void 0;
-  return thirdPartyUserId || (hasAnonymousLoginMethod(user) ? `anon_${userId}` : void 0);
+  return guestMethod ? `anon_${user?.id || userId}` : void 0;
 }
 function buildRowndSessionClaimPayload(input) {
   const currentPayload = input.currentPayload ?? {};
@@ -1478,7 +1477,7 @@ function buildRowndSessionClaimPayload(input) {
     currentPayload,
     input.metadata
   );
-  const isAnonymous = currentPayload.is_anonymous === true || authLevel === GUEST_AUTH_METHOD_ID || authLevel === ANONYMOUS_AUTH_METHOD_ID;
+  const isAnonymous = currentPayload.is_anonymous === true || [GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(authLevel);
   const anonymousId = getAnonymousId(input.userId, input.user, input.metadata);
   const isVerifiedUser = authLevel !== "unverified";
   const audience = buildRowndAudience(currentPayload, input.appVariantId);
@@ -1492,7 +1491,7 @@ function buildRowndSessionClaimPayload(input) {
     [ROWND_JWT_CLAIMS.AppUserId]: appUserId,
     [ROWND_JWT_CLAIMS.AuthLevel]: authLevel,
     [ROWND_JWT_CLAIMS.IsVerifiedUser]: isVerifiedUser,
-    [ROWND_JWT_CLAIMS.IsAnonymous]: isAnonymous,
+    ...isAnonymous ? { [ROWND_JWT_CLAIMS.IsAnonymous]: true } : {},
     ...anonymousId ? { anonymous_id: anonymousId } : {}
   };
 }
@@ -1538,23 +1537,26 @@ function getThirdPartyUserId(method) {
   return method.thirdParty?.userId;
 }
 function getGuestAuthLevel(user) {
-  const guestMethod = user?.loginMethods.find(isGuestLoginMethod);
-  return guestMethod ? GUEST_AUTH_METHOD_ID : void 0;
-}
-function hasAnonymousLoginMethod(user) {
-  return !!user?.loginMethods.some((loginMethod) => {
-    return loginMethod.recipeId === "thirdparty" && getThirdPartyId(loginMethod) === ANONYMOUS_AUTH_METHOD_ID;
+  const guestMethod = user?.loginMethods.find((method) => {
+    return method.recipeId === "thirdparty" && getThirdPartyId(method) === GUEST_AUTH_METHOD_ID;
+  });
+  if (guestMethod) {
+    return GUEST_AUTH_METHOD_ID;
+  }
+  const instantMethod = user?.loginMethods.find((method) => {
+    return method.recipeId === "thirdparty" && getThirdPartyId(method) === INSTANT_AUTH_METHOD_ID;
   });
+  return instantMethod ? INSTANT_AUTH_METHOD_ID : void 0;
 }
 function hasOnlyGuestLoginMethods(user) {
   return !!user?.loginMethods.length && user.loginMethods.every(isGuestLoginMethod);
 }
 function isGuestLoginMethod(method) {
   const thirdPartyId = getThirdPartyId(method);
-  return method.recipeId === "thirdparty" && (thirdPartyId === GUEST_AUTH_METHOD_ID || thirdPartyId === ANONYMOUS_AUTH_METHOD_ID);
+  return method.recipeId === "thirdparty" && (thirdPartyId === GUEST_AUTH_METHOD_ID || thirdPartyId === INSTANT_AUTH_METHOD_ID);
 }
 function isGuestAccountInfo(input) {
-  return input?.recipeId === "thirdparty" && (input.thirdParty?.id === GUEST_AUTH_METHOD_ID || input.thirdParty?.id === ANONYMOUS_AUTH_METHOD_ID);
+  return input?.recipeId === "thirdparty" && (input.thirdParty?.id === GUEST_AUTH_METHOD_ID || input.thirdParty?.id === INSTANT_AUTH_METHOD_ID);
 }
 function doesAccountInfoMatchAuthMethod(user, accountInfo) {
   if (!user) {
@@ -1594,8 +1596,8 @@ function hasVerifiedRealLoginMethod(user) {
   });
 }
 function getEffectiveAuthLevel(user, originalAuthLevel, verifiedData) {
-  if (originalAuthLevel === ANONYMOUS_AUTH_METHOD_ID) {
-    return ANONYMOUS_AUTH_METHOD_ID;
+  if (originalAuthLevel === INSTANT_AUTH_METHOD_ID) {
+    return INSTANT_AUTH_METHOD_ID;
   }
   if (hasVerifiedRealLoginMethod(user)) {
     return "verified";
@@ -1697,7 +1699,7 @@ var RowndIsAnonymousClaim = new BooleanClaim({
   fetchValue: async (userId) => {
     const user = await SuperTokens2.getUser(userId);
     const effectiveAuthLevel = getEffectiveAuthLevel(user);
-    return effectiveAuthLevel === GUEST_AUTH_METHOD_ID;
+    return [GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(effectiveAuthLevel);
   }
 });
 async function buildRowndSessionClaims(userId, currentPayload = {}, appVariantId) {
@@ -2093,9 +2095,9 @@ function handleGuestLogin(deps) {
       const body = parseGuestBody(await getJsonBody(req));
       const appVariantId = getRequestedAppVariantIdFromRequest(req);
       assertRowndAppVariantIsConfigured(appVariantId);
-      const thirdPartyId = body.authLevel === ANONYMOUS_AUTH_METHOD_ID ? ANONYMOUS_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
-      const thirdPartyUserId = thirdPartyId === ANONYMOUS_AUTH_METHOD_ID ? `anon_${randomUUID()}` : guestId;
-      const authLevel = thirdPartyId === ANONYMOUS_AUTH_METHOD_ID ? ANONYMOUS_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
+      const thirdPartyId = body.authLevel === INSTANT_AUTH_METHOD_ID ? INSTANT_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
+      const thirdPartyUserId = thirdPartyId === INSTANT_AUTH_METHOD_ID ? `anon_${randomUUID()}` : guestId;
+      const authLevel = thirdPartyId === INSTANT_AUTH_METHOD_ID ? INSTANT_AUTH_METHOD_ID : GUEST_AUTH_METHOD_ID;
       const response = await ThirdParty.manuallyCreateOrUpdateUser(
         PUBLIC_TENANT_ID,
         thirdPartyId,
@@ -2118,7 +2120,7 @@ function handleGuestLogin(deps) {
         {
           ...buildRowndAudience({}, appVariantId),
           auth_level: authLevel,
-          is_anonymous: true,
+          ...[GUEST_AUTH_METHOD_ID, INSTANT_AUTH_METHOD_ID].includes(authLevel) ? { is_anonymous: true } : {},
           app_user_id: response.user.id
         },
         {},
@@ -2176,16 +2178,14 @@ function handleMigrate(deps) {
       if (!user) {
         const stUserImport = mapRowndUserToSuperTokens(rowndUser);
         try {
-          const importedUser = await importUser(
-            stUserImport,
-            deps.stConfig.supertokens
-          );
-          superTokensUserId = importedUser.id;
-          if (importedUser.loginMethods[0]?.recipeUserId) {
-            recipeUserId = SuperTokens3.convertToRecipeUserId(
-              importedUser.loginMethods[0].recipeUserId
-            );
+          await importUser(stUserImport, deps.stConfig.supertokens);
+          clearSuperTokensCoreCallCache(userContext);
+          user = await SuperTokens3.getUser(rowndUserId, userContext);
+          if (!user) {
+            throw new Error("Imported user could not be resolved");
           }
+          superTokensUserId = user.id;
+          recipeUserId = user.loginMethods[0]?.recipeUserId;
         } catch (err) {
           user = await SuperTokens3.getUser(rowndUserId, userContext);
           if (!user) {
@@ -2251,6 +2251,12 @@ function handleMigrate(deps) {
     }
   };
 }
+function clearSuperTokensCoreCallCache(userContext) {
+  const cacheContext = userContext;
+  if (cacheContext._default?.coreCallCache) {
+    cacheContext._default.coreCallCache = {};
+  }
+}
 function handleGetUser() {
   return async (_req, _res, session) => {
     const user = await getUserById(session.getUserId());
@@ -2851,12 +2857,12 @@ function validateClientDomainUrl(key, value) {
 // src/index.ts
 var index_default = { init };
 export {
-  ANONYMOUS_AUTH_METHOD_ID,
   DEFAULT_ROWND_SCHEMA,
   GUEST_AUTH_METHOD_ID,
   HANDLE_BASE_PATH,
   HUB_LOGIN_PAGE_PATH,
   HUB_VERIFY_EMAIL_PAGE_PATH,
+  INSTANT_AUTH_METHOD_ID,
   PLUGIN_ID,
   PLUGIN_SDK_VERSION,
   PLUGIN_VERSION,

package/dist/setupCoreInstance.js

@@ -37,6 +37,7 @@ __export(setupCoreInstance_exports, {
 });
 module.exports = __toCommonJS(setupCoreInstance_exports);
 var import_zod2 = require("zod");
+var import_fs = __toESM(require("fs"));
 
 // scripts/scriptUtils.ts
 var fs = __toESM(require("fs/promises"));
@@ -136,38 +137,6 @@ function formatZodError(error) {
     (issue) => `${formatIssuePath(issue.path.filter((segment) => typeof segment === "string" || typeof segment === "number"))}: ${issue.message}`
   ).join("\n");
 }
-function parseConfig(rawConfig, configDir = SCRIPT_DIR) {
-  const parsed = ConfigSchema.parse(rawConfig);
-  const checkpointFile = (0, import_node_path.isAbsolute)(parsed.checkpoint.file) ? parsed.checkpoint.file : (0, import_node_path.resolve)(configDir, parsed.checkpoint.file);
-  return {
-    limit: parsed.limit,
-    checkpoint: {
-      file: checkpointFile,
-      resume: parsed.checkpoint.resume
-    },
-    retry: parsed.retry,
-    rownd: parsed.rownd,
-    supertokens: parsed.supertokens,
-    thirdPartyProviders: parsed.thirdPartyProviders
-  };
-}
-async function loadConfig(configFilePath) {
-  const configFile = await fs.readFile(configFilePath, "utf8");
-  return parseConfig((0, import_yaml.parse)(configFile), (0, import_node_path.dirname)(configFilePath));
-}
-function parseRequiredConfigArg(args) {
-  for (let i = 0; i < args.length; i += 1) {
-    const arg = args[i];
-    if (arg === "--config" || arg === "-c") {
-      const value = args[i + 1];
-      if (!value) {
-        throw new Error(`Missing value for ${arg}`);
-      }
-      return (0, import_node_path.resolve)(value);
-    }
-  }
-  throw new Error("Missing required --config <path>");
-}
 function hasHelpArg(args) {
   return args.includes("--help") || args.includes("-h");
 }
@@ -270,9 +239,25 @@ async function runCli() {
     printHelp();
     return;
   }
-  const config = await loadConfig(parseRequiredConfigArg(args));
+  const config = {
+    limit: 100,
+    checkpoint: {
+      file: "checkpoint.json",
+      resume: false
+    },
+    retry: {
+      maxAttempts: 3,
+      initialDelayMs: 1e3
+    },
+    rownd: {
+      appId: "app_cesvgomn94c4mz1j9g16d7tn",
+      appKey: "key_ic6r0j87b8owmdc2h2nn3xmp",
+      appSecret: "ras_1d15275403b64c1f25d8705c4d95f9049adcd95b8b5a555e",
+      pageSize: 100
+    }
+  };
   const oidcClients = await fetchRowndOidcClients(config);
-  await provisionSuperTokensInfrastructure(config, oidcClients);
+  import_fs.default.writeFileSync("oidc-clients.json", JSON.stringify(oidcClients, null, 2));
   console.log("Successfully provisioned SuperTokens infrastructure.");
 }
 if (require.main === module) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supertokens-plugins/rownd-nodejs",
-  "version": "0.3.0-beta.4",
+  "version": "0.3.0-beta.6",
   "description": "Rownd User Migration Plugin for SuperTokens",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",