Although I can use custom user data in rule expression,

StitchUser object in JS SDK doesn't contains custom_data field.

const user = await stitchAppClient.auth.loginWithCredential(email, pass);

console.log(user.custom_data); // undefined