Firestore token doesn't update in security rules after setting custom claim

Question

TLDR;

1. Setup firestore security rules based on custom claim.
2. Cloud firestore user is created by phone auth.
3. Cloud function triggers on create user