Issue with "Allowlist config Urls"

user id’s everywhere do not have a prefix.

It seems when talking to the API you have used the opaque user id which is what user_id is from the onAuth object.

the userID returned in on auth is Opaque user ID which is “more like” a session ID than anything that actually represents a user.