bug: penpot.currentUser returns an empty id and and a null name

[a-ng-d]

Steps To Reproduce

Hello Penpot team!

The steps are simple:

• Add the user:read permission in the manifest.json
• Call penpot.currentUser in plugin.js and log what it returns
• Look at the console

Expected behavior

I expect the currentUser object to return my id, name, and avatarUrl.

Actual behavior

currentUser returns:

{
  ...currentUser,
  id: '',
  name: null,
  avatarUrl: "data:image/png;base64…",
}

Screenshots or video

Desktop (please complete the following information)

• OS: macOS 15.4 (24E248)
• Browser: Arc Version 1.91.0 (61725) - Chromium Engine Version 135.0.7049.96

Smartphone (please complete the following information)

No response

Environment (please complete the following information)

• Host: https://design.penpot.app

Frontend Stack Trace

Backend Stack Trace

Additional context

No response