@niledatabase/server 2.4.2-alpha.4 → 3.0.0-alpha.0

package/dist/server.cjs.development.js

@@ -474,7 +474,7 @@ function Logger(config) {
   };
 }
 
-var getDatbaseId = function getDatbaseId(cfg) {
+var getDatabaseId = function getDatabaseId(cfg) {
   var config = cfg.config,
     logger = cfg.logger;
   var _Logger = Logger(config, '[databaseId]'),
@@ -565,43 +565,62 @@ var getTenantId = function getTenantId(cfg) {
   }
   return null;
 };
+var getLocal = function getLocal(cfg) {
+  var config = cfg.config,
+    logger = cfg.logger;
+  if (process.env.NILEDB_LOCAL) {
+    var _Logger7 = Logger(config, '[local]'),
+      info = _Logger7.info;
+    logger && info(logger, 'NILEDB_LOCAL', process.env.NILEDB_LOCAL);
+    var apiUrl = new URL(process.env.NILEDB_LOCAL);
+    return apiUrl.href;
+  }
+  return 'http://localhost:3000';
+};
+/**
+ * @param cfg various overrides
+ * @returns the url for REST to use
+ */
 var getBasePath = function getBasePath(cfg) {
   var _config$api4;
   var config = cfg.config,
     logger = cfg.logger;
-  var _Logger7 = Logger(config, '[basePath]'),
-    info = _Logger7.info;
+  var _Logger8 = Logger(config, '[basePath]'),
+    info = _Logger8.info;
   var basePath = config == null || (_config$api4 = config.api) == null ? void 0 : _config$api4.basePath;
+  var version = '';
+  if (!/\/v\d\//.test(String(basePath))) {
+    var _config$api5, _config$api$version, _config$api6;
+    version = (config == null || (_config$api5 = config.api) == null ? void 0 : _config$api5.version) === 1 ? '' : "/v" + ((_config$api$version = config == null || (_config$api6 = config.api) == null ? void 0 : _config$api6.version) != null ? _config$api$version : 2);
+  }
   if (basePath) {
-    var _config$api5;
-    logger && info(logger, 'config', config == null || (_config$api5 = config.api) == null ? void 0 : _config$api5.basePath);
-    return basePath;
+    logger && info(logger, 'config', basePath);
+    return "" + basePath + version;
   }
   if (process.env.NILEDB_API_URL) {
     logger && info(logger, 'NILEDB_API_URL', process.env.NILEDB_API_URL);
     var apiUrl = new URL(process.env.NILEDB_API_URL);
-    return apiUrl.origin;
+    return apiUrl.href;
   }
-  logger && info(logger, 'default', 'https://api.thenile.dev');
-  return 'https://api.thenile.dev';
+  throw new Error('NILEDB_API_URL is missing.');
 };
 var getControlPlane = function getControlPlane(cfg) {
   var config = cfg.config,
     logger = cfg.logger;
-  var _Logger8 = Logger(config, '[basePath]'),
-    info = _Logger8.info;
+  var _Logger9 = Logger(config, '[basePath]'),
+    info = _Logger9.info;
   if (process.env.NILEDB_CONFIGURE) {
     logger && info(logger, 'NILEDB_CONFIGURE', process.env.NILEDB_CONFIGURE);
-    return "https://" + process.env.NILEDB_CONFIGURE;
+    return process.env.NILEDB_CONFIGURE;
   }
   logger && info(logger, 'default', process.env.NILEDB_CONFIGURE);
-  return 'https://api.thenile.dev';
+  return 'https://global.thenile.dev';
 };
 function getDbHost(cfg) {
   var config = cfg.config,
     logger = cfg.logger;
-  var _Logger9 = Logger(config, '[db.host]'),
-    info = _Logger9.info;
+  var _Logger10 = Logger(config, '[db.host]'),
+    info = _Logger10.info;
   if (config != null && config.db && config.db.host) {
     logger && info(logger, 'config', config == null ? void 0 : config.db.host);
     return config.db.host;
@@ -622,8 +641,8 @@ function getDbPort(cfg) {
   var _config$db;
   var config = cfg.config,
     logger = cfg.logger;
-  var _Logger10 = Logger(config, '[db.port]'),
-    info = _Logger10.info;
+  var _Logger11 = Logger(config, '[db.port]'),
+    info = _Logger11.info;
   if (config != null && (_config$db = config.db) != null && _config$db.port && config.db.port != null) {
     var _config$db2;
     logger && info(logger, 'config', config == null ? void 0 : config.db.port);
@@ -641,19 +660,25 @@ var logProtector = function logProtector(logger) {
   return logger ;
 };
 
-var _excluded$1 = ["host", "port"],
+var _excluded$2 = ["host", "port"],
   _excluded2 = ["host", "port"];
 var ApiConfig = /*#__PURE__*/function () {
   function ApiConfig(_ref) {
     var basePath = _ref.basePath,
       cookieKey = _ref.cookieKey,
-      token = _ref.token;
+      token = _ref.token,
+      version = _ref.version,
+      localPath = _ref.localPath;
     this.cookieKey = void 0;
     this.basePath = void 0;
+    this.version = void 0;
+    this.localPath = void 0;
     this._token = void 0;
     this.basePath = basePath;
     this.cookieKey = cookieKey;
+    this.version = version;
     this._token = token;
+    this.localPath = localPath != null ? localPath : 'http://localhost:3000';
   }
   return _createClass(ApiConfig, [{
     key: "token",
@@ -670,11 +695,15 @@ var Config = /*#__PURE__*/function () {
     var _this = this,
       _config$db2,
       _config$api$cookieKey2,
-      _config$api2;
+      _config$api3,
+      _config$api$version2,
+      _config$api4;
     this.user = void 0;
     this.password = void 0;
     this.databaseId = void 0;
     this.databaseName = void 0;
+    this.routePrefix = void 0;
+    this.routes = void 0;
     this.debug = void 0;
     this.db = void 0;
     this.api = void 0;
@@ -682,8 +711,8 @@ var Config = /*#__PURE__*/function () {
     this._userId = void 0;
     this.configure = /*#__PURE__*/function () {
       var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(config) {
-        var _config$db, _config$api$cookieKey, _config$api;
-        var _Logger, info, error, envVarConfig, _ref3, host, port, dbConfig, configuredHost, configuredPort, basePath, cp, databaseName, url, res, database, possibleError, json, message, _database, apiHost, dbHost, name, id, dburl, apiurl;
+        var _config$db, _envVarConfig$config, _config$api$cookieKey, _config$api, _config$api$version, _config$api2;
+        var _Logger, info, error, envVarConfig, _ref3, host, port, dbConfig, configuredHost, configuredPort, basePath, cp, databaseName, url, res, database, possibleError, json, message, _database, apiHost, dbHost, name, id, duckApiHost, dburl;
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
@@ -691,14 +720,14 @@ var Config = /*#__PURE__*/function () {
               envVarConfig = {
                 config: config
               };
-              _ref3 = (_config$db = config.db) != null ? _config$db : {}, host = _ref3.host, port = _ref3.port, dbConfig = _objectWithoutPropertiesLoose(_ref3, _excluded$1);
+              _ref3 = (_config$db = config.db) != null ? _config$db : {}, host = _ref3.host, port = _ref3.port, dbConfig = _objectWithoutPropertiesLoose(_ref3, _excluded$2);
               configuredHost = host != null ? host : getDbHost(envVarConfig);
               configuredPort = port != null ? port : getDbPort(envVarConfig);
               if (!(configuredHost && _this.databaseName && _this.databaseId)) {
                 _context.next = 8;
                 break;
               }
-              info('Alreaady configured, aborting fetch');
+              info('Already configured, aborting fetch');
               return _context.abrupt("return", _this);
             case 8:
               basePath = getBasePath(envVarConfig);
@@ -711,7 +740,7 @@ var Config = /*#__PURE__*/function () {
               if (databaseName) {
                 url.searchParams.set('databaseName', databaseName);
               }
-              info(url.href);
+              info('configuring from', url.href);
               _context.next = 16;
               return fetch(url, {
                 headers: {
@@ -762,26 +791,30 @@ var Config = /*#__PURE__*/function () {
                 break;
               }
               error(database);
-              throw new Error('HTTP error has occured');
+              throw new Error('HTTP error has occurred');
             case 41:
               throw new Error('Unable to auto-configure. Please remove NILEDB_NAME, NILEDB_API_URL, NILEDB_POSTGRES_URL, and/or NILEDB_HOST from your environment variables.');
             case 42:
               if (typeof database === 'object') {
                 _database = database, apiHost = _database.apiHost, dbHost = _database.dbHost, name = _database.name, id = _database.id;
+                duckApiHost = getBasePath(envVarConfig) || apiHost; // this needs changed in the control plane response
                 _this.databaseId = id;
                 _this.databaseName = name;
                 dburl = new URL(dbHost);
-                apiurl = new URL(apiHost);
                 configuredHost = dburl.host;
-                basePath = apiurl.origin;
+                basePath = duckApiHost;
               }
             case 43:
+              (_envVarConfig$config = envVarConfig.config) == null || (_envVarConfig$config = _envVarConfig$config.api) == null || delete _envVarConfig$config.basePath;
+              basePath = getBasePath(envVarConfig);
               _this.api = new ApiConfig({
                 basePath: basePath,
                 cookieKey: (_config$api$cookieKey = config == null || (_config$api = config.api) == null ? void 0 : _config$api.cookieKey) != null ? _config$api$cookieKey : 'token',
                 token: getToken({
                   config: config
-                })
+                }),
+                version: (_config$api$version = config == null || (_config$api2 = config.api) == null ? void 0 : _config$api2.version) != null ? _config$api$version : 2,
+                localPath: getLocal(envVarConfig)
               });
               _this.db = _extends({
                 user: _this.user,
@@ -792,7 +825,7 @@ var Config = /*#__PURE__*/function () {
               }, dbConfig);
               info('[config set]', _this);
               return _context.abrupt("return", _this);
-            case 47:
+            case 49:
             case "end":
               return _context.stop();
           }
@@ -816,7 +849,7 @@ var Config = /*#__PURE__*/function () {
         throw new Error('Password is required. Set NILEDB_PASSWORD as an environment variable or set `password` in the config options.');
       }
     }
-    this.databaseId = getDatbaseId(_envVarConfig);
+    this.databaseId = getDatabaseId(_envVarConfig);
     this.databaseName = getDatabaseName(_envVarConfig);
     this._tenantId = getTenantId(_envVarConfig);
     this.debug = Boolean(_config == null ? void 0 : _config.debug);
@@ -830,10 +863,12 @@ var Config = /*#__PURE__*/function () {
     var _configuredPort = _port != null ? _port : getDbPort(_envVarConfig);
     this.api = new ApiConfig({
       basePath: _basePath,
-      cookieKey: (_config$api$cookieKey2 = _config == null || (_config$api2 = _config.api) == null ? void 0 : _config$api2.cookieKey) != null ? _config$api$cookieKey2 : 'token',
+      cookieKey: (_config$api$cookieKey2 = _config == null || (_config$api3 = _config.api) == null ? void 0 : _config$api3.cookieKey) != null ? _config$api$cookieKey2 : 'token',
       token: getToken({
         config: _config
-      })
+      }),
+      version: (_config$api$version2 = _config == null || (_config$api4 = _config.api) == null ? void 0 : _config$api4.version) != null ? _config$api$version2 : 2,
+      localPath: getLocal(_envVarConfig)
     });
     this.db = _extends({
       user: this.user,
@@ -926,9 +961,6 @@ var updateUserId = function updateUserId(userId) {
 var watchUserId = function watchUserId(cb) {
   return eventer.subscribe(Events.User, cb);
 };
-var updateToken = function updateToken(val) {
-  eventer.publish(Events.Token, val);
-};
 var watchToken = function watchToken(cb) {
   return eventer.subscribe(Events.Token, cb);
 };
@@ -942,8 +974,8 @@ var evictPool = function evictPool(val) {
   eventer.publish(Events.EvictPool, val);
 };
 
-var X_NILE_TENANT = 'x-nile-tenantId';
-var X_NILE_USER_ID = 'x-nile-userId';
+var X_NILE_TENANT = 'niledb-tenant-id';
+var X_NILE_USER_ID = 'niledb-user-id';
 function getTokenFromCookie(headers, cookieKey) {
   var _headers$get;
   var cookie = (_headers$get = headers.get('cookie')) == null ? void 0 : _headers$get.split('; ');
@@ -973,8 +1005,8 @@ function getTokenFromCookie(headers, cookieKey) {
 }
 function getTenantFromHttp(headers, config) {
   var _ref;
-  var cookieTenant = getTokenFromCookie(headers, 'tenantId');
-  return (_ref = cookieTenant != null ? cookieTenant : headers == null ? void 0 : headers.get(X_NILE_TENANT)) != null ? _ref : config.tenantId;
+  var cookieTenant = getTokenFromCookie(headers, X_NILE_TENANT);
+  return (_ref = cookieTenant != null ? cookieTenant : headers == null ? void 0 : headers.get(X_NILE_TENANT)) != null ? _ref : config == null ? void 0 : config.tenantId;
 }
 function getUserFromHttp(headers, config) {
   var _headers$get2;
@@ -991,7 +1023,7 @@ function _fetch(_x, _x2, _x3) {
 function _fetch2() {
   _fetch2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(config, path, opts) {
     var _config$api, _config$api2, _response$status;
-    var _Logger, info, error, url, cookieKey, headers, basicHeaders, authHeader, token, tenantId, userId, useableUrl, response, res, errorHandler, msg, _res, message, _res2, _res2$errors, _message;
+    var _Logger, info, error, url, cookieKey, headers, basicHeaders, creds, authHeader, token, tenantId, userId, useableUrl, response, res, errorHandler, msg, _res, message, _res2, _res2$errors, _message;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -999,8 +1031,10 @@ function _fetch2() {
           url = "" + ((_config$api = config.api) == null ? void 0 : _config$api.basePath) + path;
           cookieKey = (_config$api2 = config.api) == null ? void 0 : _config$api2.cookieKey;
           headers = new Headers(opts == null ? void 0 : opts.headers);
-          basicHeaders = new Headers();
+          basicHeaders = new Headers(opts == null ? void 0 : opts.headers);
           basicHeaders.set('content-type', 'application/json; charset=utf-8');
+          creds = Buffer.from(process.env.NILEDB_USER + ":" + process.env.NILEDB_PASSWORD, 'utf8').toString('base64');
+          basicHeaders.set('niledb-creds', creds);
           authHeader = headers.get('Authorization');
           if (!authHeader) {
             token = getTokenFromCookie(headers, cookieKey);
@@ -1019,78 +1053,106 @@ function _fetch2() {
           userId = getUserFromHttp(headers, config);
           updateUserId(userId);
           if (!(url.includes('{tenantId}') && !tenantId)) {
-            _context.next = 14;
+            _context.next = 16;
             break;
           }
           return _context.abrupt("return", new ResponseError('tenantId is not set for request', {
             status: 400
           }));
-        case 14:
+        case 16:
           useableUrl = url.replace('{tenantId}', encodeURIComponent(String(tenantId))).replace('{userId}', encodeURIComponent(String(userId)));
           info('[fetch]', useableUrl);
-          _context.next = 18;
+          _context.next = 20;
           return fetch(useableUrl, _extends({}, opts, {
             headers: basicHeaders
           }))["catch"](function (e) {
             error('[fetch]', '[response]', e);
           });
-        case 18:
+        case 20:
           response = _context.sent;
           if (!(response && response.status >= 200 && response.status < 300)) {
-            _context.next = 27;
+            _context.next = 39;
             break;
           }
           if (!(typeof response.clone === 'function')) {
-            _context.next = 26;
+            _context.next = 38;
             break;
           }
+          _context.prev = 23;
           _context.t0 = info;
-          _context.next = 24;
+          _context.next = 27;
           return response.clone().json();
-        case 24:
+        case 27:
           _context.t1 = _context.sent;
           (0, _context.t0)('[fetch]', '[response]', _context.t1);
-        case 26:
+          _context.next = 38;
+          break;
+        case 31:
+          _context.prev = 31;
+          _context.t2 = _context["catch"](23);
+          _context.t3 = info;
+          _context.next = 36;
+          return response.clone().text();
+        case 36:
+          _context.t4 = _context.sent;
+          (0, _context.t3)('[fetch]', '[response]', _context.t4);
+        case 38:
           return _context.abrupt("return", response);
-        case 27:
+        case 39:
+          if (!((response == null ? void 0 : response.status) === 401)) {
+            _context.next = 41;
+            break;
+          }
+          return _context.abrupt("return", new ResponseError('Unauthorized', {
+            status: 401
+          }));
+        case 41:
+          if (!((response == null ? void 0 : response.status) === 405)) {
+            _context.next = 43;
+            break;
+          }
+          return _context.abrupt("return", new ResponseError('Method not allowed', {
+            status: 405
+          }));
+        case 43:
           errorHandler = typeof (response == null ? void 0 : response.clone) === 'function' ? response.clone() : null;
           msg = '';
-          _context.prev = 29;
-          _context.next = 32;
+          _context.prev = 45;
+          _context.next = 48;
           return response == null ? void 0 : response.json();
-        case 32:
+        case 48:
           res = _context.sent;
-          _context.next = 43;
+          _context.next = 59;
           break;
-        case 35:
-          _context.prev = 35;
-          _context.t2 = _context["catch"](29);
+        case 51:
+          _context.prev = 51;
+          _context.t5 = _context["catch"](45);
           if (!errorHandler) {
-            _context.next = 42;
+            _context.next = 58;
             break;
           }
-          _context.next = 40;
+          _context.next = 56;
           return errorHandler.text();
-        case 40:
+        case 56:
           msg = _context.sent;
           if (msg) {
             error('[fetch]', '[response]', "[status: " + errorHandler.status + "]", msg);
           }
-        case 42:
+        case 58:
           if (!msg) {
-            error('[fetch]', '[response]', _context.t2);
+            error('[fetch]', '[response]', _context.t5);
           }
-        case 43:
+        case 59:
           if (!msg) {
-            _context.next = 45;
+            _context.next = 61;
             break;
           }
           return _context.abrupt("return", new ResponseError(msg, {
             status: errorHandler == null ? void 0 : errorHandler.status
           }));
-        case 45:
+        case 61:
           if (!(res && 'message' in res)) {
-            _context.next = 49;
+            _context.next = 65;
             break;
           }
           _res = res, message = _res.message;
@@ -1098,9 +1160,9 @@ function _fetch2() {
           return _context.abrupt("return", new ResponseError(message, {
             status: 400
           }));
-        case 49:
+        case 65:
           if (!(res && 'errors' in res)) {
-            _context.next = 53;
+            _context.next = 69;
             break;
           }
           _res2 = res, _res2$errors = _res2.errors, _message = _res2$errors[0];
@@ -1108,16 +1170,16 @@ function _fetch2() {
           return _context.abrupt("return", new ResponseError(_message, {
             status: 400
           }));
-        case 53:
+        case 69:
           error('[fetch]', '[response]', "[status: " + (errorHandler == null ? void 0 : errorHandler.status) + "]", 'UNHANDLED ERROR');
           return _context.abrupt("return", new ResponseError(null, {
             status: (_response$status = response == null ? void 0 : response.status) != null ? _response$status : 500
           }));
-        case 55:
+        case 71:
         case "end":
           return _context.stop();
       }
-    }, _callee, null, [[29, 35]]);
+    }, _callee, null, [[23, 31], [45, 51]]);
   }));
   return _fetch2.apply(this, arguments);
 }
@@ -1183,38 +1245,57 @@ var Requester = /*#__PURE__*/function (_Config) {
         return _ref3.apply(this, arguments);
       };
     }();
+    _this["delete"] = /*#__PURE__*/function () {
+      var _ref4 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(req, url, init) {
+        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
+          while (1) switch (_context4.prev = _context4.next) {
+            case 0:
+              _context4.next = 2;
+              return _this.request('DELETE', url, req, init);
+            case 2:
+              return _context4.abrupt("return", _context4.sent);
+            case 3:
+            case "end":
+              return _context4.stop();
+          }
+        }, _callee4);
+      }));
+      return function (_x10, _x11, _x12) {
+        return _ref4.apply(this, arguments);
+      };
+    }();
     return _this;
   }
   _inheritsLoose(Requester, _Config);
   var _proto = Requester.prototype;
   _proto.rawRequest = /*#__PURE__*/function () {
-    var _rawRequest = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(method, url, init, body) {
+    var _rawRequest = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5(method, url, init, body) {
       var _init, res;
-      return _regeneratorRuntime().wrap(function _callee4$(_context4) {
-        while (1) switch (_context4.prev = _context4.next) {
+      return _regeneratorRuntime().wrap(function _callee5$(_context5) {
+        while (1) switch (_context5.prev = _context5.next) {
           case 0:
             _init = _extends({}, init, {
               body: body,
               method: method
             });
-            _context4.next = 3;
+            _context5.next = 3;
             return _fetch(this, url, _init);
           case 3:
-            res = _context4.sent;
+            res = _context5.sent;
             if (!(res instanceof ResponseError)) {
-              _context4.next = 6;
+              _context5.next = 6;
               break;
             }
-            return _context4.abrupt("return", res.response);
+            return _context5.abrupt("return", res.response);
           case 6:
-            return _context4.abrupt("return", res);
+            return _context5.abrupt("return", res);
           case 7:
           case "end":
-            return _context4.stop();
+            return _context5.stop();
         }
-      }, _callee4, this);
+      }, _callee5, this);
     }));
-    function rawRequest(_x10, _x11, _x12, _x13) {
+    function rawRequest(_x13, _x14, _x15, _x16) {
       return _rawRequest.apply(this, arguments);
     }
     return rawRequest;
@@ -1234,10 +1315,10 @@ var Requester = /*#__PURE__*/function (_Config) {
   _proto.request =
   /*#__PURE__*/
   function () {
-    var _request = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5(method, url, req, init) {
+    var _request = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee6(method, url, req, init) {
       var headers, tenantId, cookie, _headers, _tenantId, _cookie, body, _init;
-      return _regeneratorRuntime().wrap(function _callee5$(_context5) {
-        while (1) switch (_context5.prev = _context5.next) {
+      return _regeneratorRuntime().wrap(function _callee6$(_context6) {
+        while (1) switch (_context6.prev = _context6.next) {
           case 0:
             // set the headers
             headers = new Headers(init ? init == null ? void 0 : init.headers : {});
@@ -1265,22 +1346,22 @@ var Requester = /*#__PURE__*/function (_Config) {
             // default the body - may be the actual payload for the API
             body = JSON.stringify(req); // comes from next/some server
             if (!(method === 'GET')) {
-              _context5.next = 7;
+              _context6.next = 7;
               break;
             }
             body = undefined;
-            _context5.next = 14;
+            _context6.next = 14;
             break;
           case 7:
             if (!(req instanceof Request)) {
-              _context5.next = 13;
+              _context6.next = 13;
               break;
             }
-            _context5.next = 10;
+            _context6.next = 10;
             return new Response(req.body).text();
           case 10:
-            body = _context5.sent;
-            _context5.next = 14;
+            body = _context6.sent;
+            _context6.next = 14;
             break;
           case 13:
             if (
@@ -1292,17 +1373,17 @@ var Requester = /*#__PURE__*/function (_Config) {
             _init = _extends({}, init, {
               headers: headers
             });
-            _context5.next = 17;
+            _context6.next = 17;
             return this.rawRequest(method, url, _init, body);
           case 17:
-            return _context5.abrupt("return", _context5.sent);
+            return _context6.abrupt("return", _context6.sent);
           case 18:
           case "end":
-            return _context5.stop();
+            return _context6.stop();
         }
-      }, _callee5, this);
+      }, _callee6, this);
     }));
-    function request(_x14, _x15, _x16, _x17) {
+    function request(_x17, _x18, _x19, _x20) {
       return _request.apply(this, arguments);
     }
     return request;
@@ -1310,103 +1391,24 @@ var Requester = /*#__PURE__*/function (_Config) {
   return Requester;
 }(Config);
 
-var Auth = /*#__PURE__*/function (_Config) {
-  function Auth(config) {
+var Users = /*#__PURE__*/function (_Config) {
+  function Users(config, headers) {
     var _this;
     _this = _Config.call(this, config) || this;
-    _this.login = /*#__PURE__*/function () {
+    _this.headers = void 0;
+    _this.createUser = /*#__PURE__*/function () {
       var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, init) {
-        var headers, _requester, params, sso, providerRes, providers, res, _this$api, token, cookie, tenants, tenant, tenantId, text;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
-              headers = new Headers({
-                'content-type': 'application/json'
-              });
               _requester = new Requester(_this);
-              params = req instanceof Request ? new URL(req.url).searchParams : new URLSearchParams();
-              sso = params.get('sso');
-              if (!(sso === 'true')) {
-                _context.next = 18;
-                break;
-              }
-              _context.next = 7;
-              return _this.listProviders(req.clone(), init);
-            case 7:
-              providerRes = _context.sent;
-              if (!(providerRes && providerRes.status >= 200 && providerRes.status < 300)) {
-                _context.next = 18;
-                break;
-              }
-              _context.next = 11;
-              return new Response(providerRes.body).json();
-            case 11:
-              providers = _context.sent;
-              if (!(providers.length > 0)) {
-                _context.next = 18;
-                break;
-              }
-              if (!(providers.length > 1)) {
-                _context.next = 15;
-                break;
-              }
-              return _context.abrupt("return", new Response(JSON.stringify(providers), {
-                status: 200
-              }));
-            case 15:
-              // is there a way to do this? probably not.
-              headers.set(X_NILE_TENANT, providers[0].tenantId);
-              headers.append('set-cookie', "tenantId=" + providers[0].tenantId + "; path=/; httponly;");
-              // const ssoResp = await this.loginSSO(req);
-              return _context.abrupt("return", new Response(JSON.stringify({
-                redirectURI: "" + _this.api.basePath + _this.loginSSOUrl('okta')
-              }), {
-                status: 200
-              }));
-            case 18:
-              _context.next = 20;
-              return _requester.post(req, _this.loginUrl, init)["catch"](function (e) {
-                // eslint-disable-next-line no-console
-                console.error(e);
-                return e;
-              });
-            case 20:
-              res = _context.sent;
-              if (!(res instanceof ResponseError)) {
-                _context.next = 23;
-                break;
-              }
-              return _context.abrupt("return", res.response);
-            case 23:
-              if (!(res && res.status >= 200 && res.status < 300)) {
-                _context.next = 36;
-                break;
-              }
-              _context.next = 26;
-              return res.json();
-            case 26:
-              token = _context.sent;
-              cookie = ((_this$api = _this.api) == null ? void 0 : _this$api.cookieKey) + "=" + token.token.jwt + "; path=/; samesite=lax; httponly;";
-              headers.append('set-cookie', cookie);
-              tenants = token.tenants;
-              tenant = tenants == null ? void 0 : tenants.values();
-              tenantId = tenant == null ? void 0 : tenant.next().value;
-              headers.set(X_NILE_TENANT, tenantId);
-              headers.append('set-cookie', "tenantId=" + tenantId + "; path=/; httponly;");
-              updateToken(token.token.jwt);
-              return _context.abrupt("return", new Response(JSON.stringify(token), {
-                status: 200,
-                headers: headers
-              }));
-            case 36:
-              _context.next = 38;
-              return res.text();
-            case 38:
-              text = _context.sent;
-              return _context.abrupt("return", new Response(text, {
-                status: res.status
-              }));
-            case 40:
+              _init = _this.handleHeaders(init);
+              _context.next = 4;
+              return _requester.post(req, _this.usersUrl, _init);
+            case 4:
+              return _context.abrupt("return", _context.sent);
+            case 5:
             case "end":
               return _context.stop();
           }
@@ -1416,249 +1418,215 @@ var Auth = /*#__PURE__*/function (_Config) {
         return _ref.apply(this, arguments);
       };
     }();
-    _this.loginSSO = function (redirectUrl) {
-      var ssoLogin = /*#__PURE__*/function () {
-        var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(req) {
-          var _this$api2;
-          var headers, body, accessToken, tenantId, cookie;
-          return _regeneratorRuntime().wrap(function _callee2$(_context2) {
-            while (1) switch (_context2.prev = _context2.next) {
-              case 0:
-                headers = new Headers();
-                _context2.next = 3;
-                return req.formData();
-              case 3:
-                body = _context2.sent;
-                _context2.next = 6;
-                return body.get('access_token');
-              case 6:
-                accessToken = _context2.sent;
-                _context2.next = 9;
-                return body.get('tenantId');
-              case 9:
-                tenantId = _context2.sent;
-                cookie = ((_this$api2 = _this.api) == null ? void 0 : _this$api2.cookieKey) + "=" + accessToken + "; path=/; samesite=lax; httponly;";
-                updateToken(accessToken);
-                headers.append('set-cookie', cookie);
-                headers.set(X_NILE_TENANT, tenantId);
-                headers.append('set-cookie', "tenantId=" + tenantId + "; path=/; httponly;");
-                headers.set('Location', redirectUrl);
-                return _context2.abrupt("return", new Response(null, {
-                  headers: headers,
-                  status: 303
-                }));
-              case 17:
-              case "end":
-                return _context2.stop();
-            }
-          }, _callee2);
-        }));
-        return function ssoLogin(_x3) {
-          return _ref2.apply(this, arguments);
-        };
-      }();
-      return ssoLogin;
-    };
-    _this.loginSSOUrl = function (provider) {
-      var _this$tenantId;
-      return "/databases/" + encodeURIComponent(_this.databaseId) + "/tenants/" + ((_this$tenantId = _this.tenantId) != null ? _this$tenantId : '{tenantId}') + "/auth/oidc/providers/" + provider + "/login";
-    };
-    _this.signUp = /*#__PURE__*/function () {
+    _this.updateUser = /*#__PURE__*/function () {
+      var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(userId, req, init) {
+        var _requester, _init;
+        return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+          while (1) switch (_context2.prev = _context2.next) {
+            case 0:
+              _requester = new Requester(_this);
+              _init = _this.handleHeaders(init);
+              _context2.next = 4;
+              return _requester.put(req, _this.usersUrl + "/" + userId, _init);
+            case 4:
+              return _context2.abrupt("return", _context2.sent);
+            case 5:
+            case "end":
+              return _context2.stop();
+          }
+        }, _callee2);
+      }));
+      return function (_x3, _x4, _x5) {
+        return _ref2.apply(this, arguments);
+      };
+    }();
+    _this.listUsers = /*#__PURE__*/function () {
       var _ref3 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(req, init) {
-        var headers, _requester, res, _this$api3, _token$token, _token$token2, token, cookie, id, text;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee3$(_context3) {
           while (1) switch (_context3.prev = _context3.next) {
             case 0:
-              headers = new Headers();
               _requester = new Requester(_this);
+              _init = _this.handleHeaders(init);
               _context3.next = 4;
-              return _requester.post(req, _this.signUpUrl, init)["catch"](function (e) {
-                // eslint-disable-next-line no-console
-                console.error(e);
-                return e;
-              });
+              return _requester.get(req, _this.tenantUsersUrl, _init);
             case 4:
-              res = _context3.sent;
-              if (!(res instanceof ResponseError)) {
-                _context3.next = 7;
-                break;
-              }
-              return _context3.abrupt("return", res.response);
-            case 7:
-              if (!(res && res.status >= 200 && res.status < 300)) {
-                _context3.next = 19;
-                break;
-              }
-              _context3.next = 10;
-              return res.json();
-            case 10:
-              token = _context3.sent;
-              cookie = ((_this$api3 = _this.api) == null ? void 0 : _this$api3.cookieKey) + "=" + ((_token$token = token.token) == null ? void 0 : _token$token.jwt) + "; path=/; samesite=lax; httponly;";
-              headers.append('set-cookie', cookie);
-              id = token.id;
-              updateToken((_token$token2 = token.token) == null ? void 0 : _token$token2.jwt);
-              updateUserId(id);
-              headers.set(X_NILE_USER_ID, id);
-              headers.append('set-cookie', "userId=" + id + "; path=/; httponly;");
-              return _context3.abrupt("return", new Response(JSON.stringify(token), {
-                status: 201,
-                headers: headers
-              }));
-            case 19:
-              _context3.next = 21;
-              return res.text();
-            case 21:
-              text = _context3.sent;
-              return _context3.abrupt("return", new Response(text, {
-                status: res.status
-              }));
-            case 23:
+              return _context3.abrupt("return", _context3.sent);
+            case 5:
             case "end":
               return _context3.stop();
           }
         }, _callee3);
       }));
-      return function (_x4, _x5) {
+      return function (_x6, _x7) {
         return _ref3.apply(this, arguments);
       };
     }();
-    _this.listTenantProviders = /*#__PURE__*/function () {
+    _this.linkUser = /*#__PURE__*/function () {
       var _ref4 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(req, init) {
-        var _requester;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee4$(_context4) {
           while (1) switch (_context4.prev = _context4.next) {
             case 0:
               _requester = new Requester(_this);
-              return _context4.abrupt("return", _requester.get(req, _this.listTenantProvidersUrl, init));
-            case 2:
+              _init = _this.handleHeaders(init);
+              _context4.next = 4;
+              return _requester.put(req, _this.tenantUsersUrl, _init);
+            case 4:
+              return _context4.abrupt("return", _context4.sent);
+            case 5:
             case "end":
               return _context4.stop();
           }
         }, _callee4);
       }));
-      return function (_x6, _x7) {
+      return function (_x8, _x9) {
         return _ref4.apply(this, arguments);
       };
     }();
-    _this.createProvider = /*#__PURE__*/function () {
-      var _ref5 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5(req, init) {
-        var _requester, providerName;
+    _this.tenantUsersDeleteUrl = function (userId) {
+      var _this$tenantId;
+      return "/tenants/" + ((_this$tenantId = _this.tenantId) != null ? _this$tenantId : '{tenantId}') + "/users/" + (userId != null ? userId : '{userId}');
+    };
+    _this.getUserId = /*#__PURE__*/function () {
+      var _ref5 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5(req) {
+        var body;
         return _regeneratorRuntime().wrap(function _callee5$(_context5) {
           while (1) switch (_context5.prev = _context5.next) {
             case 0:
-              _requester = new Requester(_this);
-              providerName = 'okta';
-              return _context5.abrupt("return", _requester.post(req, _this.updateProviderUrl(providerName), init));
+              if (!(req instanceof Request)) {
+                _context5.next = 6;
+                break;
+              }
+              _context5.next = 3;
+              return new Response(req == null ? void 0 : req.body).json();
             case 3:
+              body = _context5.sent;
+              if (!body) {
+                _context5.next = 6;
+                break;
+              }
+              return _context5.abrupt("return", body.id);
+            case 6:
+              if (!('id' in req)) {
+                _context5.next = 8;
+                break;
+              }
+              return _context5.abrupt("return", req.id);
+            case 8:
+              return _context5.abrupt("return", null);
+            case 9:
             case "end":
               return _context5.stop();
           }
         }, _callee5);
       }));
-      return function (_x8, _x9) {
+      return function (_x10) {
         return _ref5.apply(this, arguments);
       };
     }();
-    _this.updateProvider = /*#__PURE__*/function () {
+    _this.unlinkUser = /*#__PURE__*/function () {
       var _ref6 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee6(req, init) {
-        var _requester, providerName;
+        var _requester, userId, _init;
         return _regeneratorRuntime().wrap(function _callee6$(_context6) {
           while (1) switch (_context6.prev = _context6.next) {
             case 0:
               _requester = new Requester(_this);
-              providerName = 'okta';
-              return _context6.abrupt("return", _requester.put(req, _this.updateProviderUrl(providerName), init));
+              _context6.next = 3;
+              return _this.getUserId(req);
             case 3:
+              userId = _context6.sent;
+              _init = _this.handleHeaders(init);
+              _context6.next = 7;
+              return _requester["delete"](req, _this.tenantUsersDeleteUrl(userId), _init);
+            case 7:
+              return _context6.abrupt("return", _context6.sent);
+            case 8:
             case "end":
               return _context6.stop();
           }
         }, _callee6);
       }));
-      return function (_x10, _x11) {
+      return function (_x11, _x12) {
         return _ref6.apply(this, arguments);
       };
     }();
-    _this.listProviders = /*#__PURE__*/function () {
+    _this.me = /*#__PURE__*/function () {
       var _ref7 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee7(req, init) {
-        var _body;
-        var _requester, body;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee7$(_context7) {
           while (1) switch (_context7.prev = _context7.next) {
             case 0:
               _requester = new Requester(_this);
-              if (!(req && 'body' in req)) {
-                _context7.next = 5;
-                break;
-              }
+              _init = _this.handleHeaders(init);
               _context7.next = 4;
-              return new Response(req.body).json();
+              return _requester.get(req, _this.meUrl, _init);
             case 4:
-              body = _context7.sent;
+              return _context7.abrupt("return", _context7.sent);
             case 5:
-              return _context7.abrupt("return", _requester.get(req, _this.providerUrl((_body = body) == null ? void 0 : _body.email), init));
-            case 6:
             case "end":
               return _context7.stop();
           }
         }, _callee7);
       }));
-      return function (_x12, _x13) {
+      return function (_x13, _x14) {
         return _ref7.apply(this, arguments);
       };
     }();
-    _this.getSSOCallbackUrl = function (param) {
-      var tenantId;
-      if (typeof tenantId === 'string') {
-        tenantId = param;
-      } else if (param instanceof Headers) {
-        tenantId = getTenantFromHttp(param, _this);
-      }
-      return "/databases/" + _this.databaseId + "/tenants/" + tenantId + "/auth/oidc/callback";
-    };
+    _this.headers = headers;
     return _this;
   }
-  _inheritsLoose(Auth, _Config);
-  var _proto = Auth.prototype;
-  _proto.updateProviderUrl = function updateProviderUrl(providerName) {
-    return "/databases/" + encodeURIComponent(this.databaseId) + "/tenants/" + (this.tenantId ? encodeURIComponent(this.tenantId) : '{tenantId}') + "/auth/oidc/providers/" + encodeURIComponent(providerName);
-  };
-  _proto.providerUrl = function providerUrl(email) {
-    return "/databases/" + encodeURIComponent(this.databaseId) + "/tenants/auth/oidc/providers" + (email ? "?email=" + encodeURIComponent(email) : '');
+  _inheritsLoose(Users, _Config);
+  var _proto = Users.prototype;
+  _proto.handleHeaders = function handleHeaders(init) {
+    if (this.headers) {
+      if (init) {
+        var _init2;
+        init.headers = new Headers(_extends({}, this.headers, (_init2 = init) == null ? void 0 : _init2.headers));
+        return init;
+      } else {
+        init = {
+          headers: this.headers
+        };
+        return init;
+      }
+    }
+    return undefined;
   };
-  return _createClass(Auth, [{
-    key: "loginUrl",
+  return _createClass(Users, [{
+    key: "usersUrl",
     get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/users/login";
+      return '/users';
     }
   }, {
-    key: "signUpUrl",
+    key: "tenantUsersUrl",
     get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/users";
+      var _this$tenantId2;
+      return "/tenants/" + ((_this$tenantId2 = this.tenantId) != null ? _this$tenantId2 : '{tenantId}') + "/users";
     }
   }, {
-    key: "listTenantProvidersUrl",
+    key: "meUrl",
     get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/tenants/" + (this.tenantId ? encodeURIComponent(this.tenantId) : '{tenantId}') + "/auth/oidc/providers";
+      return '/me';
     }
   }]);
 }(Config);
 
-var Users = /*#__PURE__*/function (_Config) {
-  function Users(config) {
+var Tenants = /*#__PURE__*/function (_Config) {
+  function Tenants(config, headers) {
     var _this;
     _this = _Config.call(this, config) || this;
-    _this.createTenantUser = /*#__PURE__*/function () {
+    _this.headers = void 0;
+    _this.createTenant = /*#__PURE__*/function () {
       var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, init) {
-        var _requester;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
               _requester = new Requester(_this);
-              _context.next = 3;
-              return _requester.post(req, _this.tenantUsersUrl, init);
+              _init = _this.handleHeaders(init);
+              return _context.abrupt("return", _requester.post(req, _this.tenantsUrl, _init));
             case 3:
-              return _context.abrupt("return", _context.sent);
-            case 4:
             case "end":
               return _context.stop();
           }
@@ -1668,18 +1636,16 @@ var Users = /*#__PURE__*/function (_Config) {
         return _ref.apply(this, arguments);
       };
     }();
-    _this.listUsers = /*#__PURE__*/function () {
+    _this.getTenant = /*#__PURE__*/function () {
       var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(req, init) {
-        var _requester;
+        var _requester, _init;
         return _regeneratorRuntime().wrap(function _callee2$(_context2) {
           while (1) switch (_context2.prev = _context2.next) {
             case 0:
               _requester = new Requester(_this);
-              _context2.next = 3;
-              return _requester.get(req, _this.usersUrl, init);
+              _init = _this.handleHeaders(init);
+              return _context2.abrupt("return", _requester.get(req, _this.tenantUrl, _init));
             case 3:
-              return _context2.abrupt("return", _context2.sent);
-            case 4:
             case "end":
               return _context2.stop();
           }
@@ -1689,166 +1655,53 @@ var Users = /*#__PURE__*/function (_Config) {
         return _ref2.apply(this, arguments);
       };
     }();
-    _this.updateUser = /*#__PURE__*/function () {
-      var _ref3 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(userId, req, init) {
-        var _requester;
-        return _regeneratorRuntime().wrap(function _callee3$(_context3) {
-          while (1) switch (_context3.prev = _context3.next) {
-            case 0:
-              _requester = new Requester(_this);
-              _context3.next = 3;
-              return _requester.put(req, _this.usersUrl + "/" + userId, init);
-            case 3:
-              return _context3.abrupt("return", _context3.sent);
-            case 4:
-            case "end":
-              return _context3.stop();
-          }
-        }, _callee3);
-      }));
-      return function (_x5, _x6, _x7) {
-        return _ref3.apply(this, arguments);
-      };
-    }();
-    _this.listTenantUsers = /*#__PURE__*/function () {
-      var _ref4 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee4(req, init) {
-        var _requester;
-        return _regeneratorRuntime().wrap(function _callee4$(_context4) {
-          while (1) switch (_context4.prev = _context4.next) {
-            case 0:
-              _requester = new Requester(_this);
-              _context4.next = 3;
-              return _requester.get(req, _this.tenantUsersUrl, init);
-            case 3:
-              return _context4.abrupt("return", _context4.sent);
-            case 4:
-            case "end":
-              return _context4.stop();
-          }
-        }, _callee4);
-      }));
-      return function (_x8, _x9) {
-        return _ref4.apply(this, arguments);
-      };
-    }();
-    _this.me = /*#__PURE__*/function () {
-      var _ref5 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee5(req, init) {
-        var _requester;
-        return _regeneratorRuntime().wrap(function _callee5$(_context5) {
-          while (1) switch (_context5.prev = _context5.next) {
-            case 0:
-              _requester = new Requester(_this);
-              _context5.next = 3;
-              return _requester.get(req, _this.meUrl, init);
-            case 3:
-              return _context5.abrupt("return", _context5.sent);
-            case 4:
-            case "end":
-              return _context5.stop();
-          }
-        }, _callee5);
-      }));
-      return function (_x10, _x11) {
-        return _ref5.apply(this, arguments);
-      };
-    }();
+    _this.headers = headers;
     return _this;
   }
-  _inheritsLoose(Users, _Config);
-  return _createClass(Users, [{
-    key: "baseUrl",
-    get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId);
+  _inheritsLoose(Tenants, _Config);
+  var _proto = Tenants.prototype;
+  _proto.handleHeaders = function handleHeaders(init) {
+    if (this.headers) {
+      if (init) {
+        var _init2;
+        init.headers = new Headers(_extends({}, this.headers, (_init2 = init) == null ? void 0 : _init2.headers));
+        return init;
+      } else {
+        init = {
+          headers: this.headers
+        };
+        return init;
+      }
     }
-  }, {
-    key: "usersUrl",
+    return undefined;
+  };
+  return _createClass(Tenants, [{
+    key: "tenantsUrl",
     get: function get() {
-      return this.baseUrl + "/users";
+      return '/tenants';
     }
   }, {
-    key: "tenantUsersUrl",
+    key: "tenantUrl",
     get: function get() {
       var _this$tenantId;
-      return this.baseUrl + "/tenants/" + ((_this$tenantId = this.tenantId) != null ? _this$tenantId : '{tenantId}') + "/users";
-    }
-  }, {
-    key: "meUrl",
-    get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/users/me";
+      return "/tenants/" + ((_this$tenantId = this.tenantId) != null ? _this$tenantId : '{tenantId}');
     }
   }]);
 }(Config);
 
-var Tenants = /*#__PURE__*/function (_Config) {
-  function Tenants(config) {
-    var _this;
-    _this = _Config.call(this, config) || this;
-    _this.createTenant = /*#__PURE__*/function () {
-      var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, init) {
-        var _requester;
-        return _regeneratorRuntime().wrap(function _callee$(_context) {
-          while (1) switch (_context.prev = _context.next) {
-            case 0:
-              _requester = new Requester(_this);
-              return _context.abrupt("return", _requester.post(req, _this.tenantsUrl, init));
-            case 2:
-            case "end":
-              return _context.stop();
-          }
-        }, _callee);
-      }));
-      return function (_x, _x2) {
-        return _ref.apply(this, arguments);
-      };
-    }();
-    _this.getTenant = /*#__PURE__*/function () {
-      var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(req, init) {
-        var _requester;
-        return _regeneratorRuntime().wrap(function _callee2$(_context2) {
-          while (1) switch (_context2.prev = _context2.next) {
-            case 0:
-              _requester = new Requester(_this);
-              return _context2.abrupt("return", _requester.get(req, _this.tenantUrl, init));
-            case 2:
-            case "end":
-              return _context2.stop();
-          }
-        }, _callee2);
-      }));
-      return function (_x3, _x4) {
-        return _ref2.apply(this, arguments);
-      };
-    }();
-    return _this;
-  }
-  _inheritsLoose(Tenants, _Config);
-  return _createClass(Tenants, [{
-    key: "tenantsUrl",
-    get: function get() {
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/tenants";
-    }
-  }, {
-    key: "tenantUrl",
-    get: function get() {
-      var _this$tenantId;
-      return "/databases/" + encodeURIComponent(this.databaseId) + "/tenants/" + ((_this$tenantId = this.tenantId) != null ? _this$tenantId : '{tenantId}');
-    }
-  }]);
-}(Config);
-
-function createProxyForPool(pool, config) {
-  var _Logger = Logger(config, '[pool]'),
-    info = _Logger.info,
-    error = _Logger.error;
-  return new Proxy(pool, {
-    get: function get(target, property) {
-      if (property === 'query') {
-        // give connection string a pass for these problems
-        if (!config.db.connectionString) {
-          if (!config.user || !config.password) {
-            error('Cannot connect to the database. User and/or password are missing. Generate them at https://console.thenile.dev');
-          } else if (!config.db.database) {
-            error('Database name is missing from the config. Call `nile.init()` or set NILEDB_ID in your .env');
+function createProxyForPool(pool, config) {
+  var _Logger = Logger(config, '[pool]'),
+    info = _Logger.info,
+    error = _Logger.error;
+  return new Proxy(pool, {
+    get: function get(target, property) {
+      if (property === 'query') {
+        // give connection string a pass for these problems
+        if (!config.db.connectionString) {
+          if (!config.user || !config.password) {
+            error('Cannot connect to the database. User and/or password are missing. Generate them at https://console.thenile.dev');
+          } else if (!config.db.database) {
+            error('Database name is missing from the config. Call `nile.init()` or set NILEDB_ID in your .env');
           }
         }
         var caller = target[property];
@@ -1867,7 +1720,7 @@ function createProxyForPool(pool, config) {
   });
 }
 
-var _excluded = ["afterCreate"];
+var _excluded$1 = ["afterCreate"];
 var NileDatabase = /*#__PURE__*/function () {
   function NileDatabase(config, id) {
     var _this = this;
@@ -1887,10 +1740,10 @@ var NileDatabase = /*#__PURE__*/function () {
       idleTimeoutMillis: 30000
     }, config.db);
     var afterCreate = poolConfig.afterCreate,
-      remaining = _objectWithoutPropertiesLoose(poolConfig, _excluded);
+      remaining = _objectWithoutPropertiesLoose(poolConfig, _excluded$1);
     config.db = poolConfig;
     this.config = config;
-    info(this.config);
+    info(this.config.db);
     this.pool = createProxyForPool(new pg.Pool(remaining), this.config);
     if (typeof afterCreate === 'function') {
       warn('Providing an pool configuration will stop automatic tenant context setting.');
@@ -2082,176 +1935,1920 @@ var makeServerId = function makeServerId(config) {
   return Buffer.from(JSON.stringify(config), 'base64').toString();
 };
 
-var _init = function init(config) {
-  var auth = new Auth(config);
-  var users = new Users(config);
-  var tenants = new Tenants(config);
-  return {
-    auth: auth,
-    users: users,
-    tenants: tenants
-  };
-};
-var Server = /*#__PURE__*/function () {
-  function Server(config) {
-    var _this = this;
-    this.config = void 0;
-    this.api = void 0;
-    this.manager = void 0;
-    this.servers = void 0;
-    this.config = new Config(config, '[initial config]');
-    this.servers = new Map();
-    this.api = _init(this.config);
-    this.manager = new DBManager(this.config);
-    watchTenantId(function (tenantId) {
-      _this.tenantId = tenantId;
-    });
-    watchUserId(function (userId) {
-      _this.userId = userId;
-    });
-    watchToken(function (token) {
-      _this.token = token;
-    });
-  }
-  var _proto = Server.prototype;
-  _proto.setConfig = function setConfig(cfg) {
-    this.config = new Config(cfg);
-  };
-  _proto.init = /*#__PURE__*/function () {
-    var _init2 = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(cfg) {
-      var updatedConfig;
+/**
+ * a helper function to log in server side.
+ */
+function serverAuth(config, handlers) {
+  return /*#__PURE__*/function () {
+    var _login = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(_ref) {
+      var _yield$csrfRes$json, _exec;
+      var email, password, sessionUrl, sessionReq, sessionRes, providers, csrf, csrfReq, csrfRes, _ref2, csrfToken, credentials, csrfCookie, signInUrl, postReq, loginRes, authCookie, _ref3, token;
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            _context.next = 2;
-            return this.config.configure(_extends({}, this.config, cfg));
-          case 2:
-            updatedConfig = _context.sent;
-            this.setConfig(updatedConfig);
-            this.manager.clear(this.config);
-            this.manager = new DBManager(this.config);
-            this.api = _init(this.config);
-            return _context.abrupt("return", this);
+            email = _ref.email, password = _ref.password;
+            sessionUrl = new URL(config.api.localPath + "/api/auth/providers");
+            sessionReq = new Request(sessionUrl, {
+              method: 'GET',
+              headers: new Headers({
+                host: sessionUrl.host
+              })
+            });
+            _context.next = 5;
+            return handlers.POST(sessionReq);
+          case 5:
+            sessionRes = _context.sent;
+            _context.next = 8;
+            return sessionRes == null ? void 0 : sessionRes.json();
           case 8:
+            providers = _context.sent;
+            csrf = new URL(config.api.localPath + "/api/auth/csrf");
+            csrfReq = new Request(csrf, {
+              method: 'GET',
+              headers: new Headers({
+                host: sessionUrl.host
+              })
+            });
+            _context.next = 13;
+            return handlers.POST(csrfReq);
+          case 13:
+            csrfRes = _context.sent;
+            _context.next = 16;
+            return csrfRes == null ? void 0 : csrfRes.json();
+          case 16:
+            _context.t0 = _yield$csrfRes$json = _context.sent;
+            if (!(_context.t0 != null)) {
+              _context.next = 21;
+              break;
+            }
+            _context.t1 = _yield$csrfRes$json;
+            _context.next = 22;
+            break;
+          case 21:
+            _context.t1 = {};
+          case 22:
+            _ref2 = _context.t1;
+            csrfToken = _ref2.csrfToken;
+            credentials = providers.credentials;
+            csrfCookie = csrfRes == null ? void 0 : csrfRes.headers.get('set-cookie');
+            expect(csrfCookie).toContain('nile.csrf-token=');
+            signInUrl = new URL(credentials.callbackUrl);
+            if (csrfCookie) {
+              _context.next = 30;
+              break;
+            }
+            throw new Error('unable to authenticate REST');
+          case 30:
+            postReq = new Request(signInUrl, {
+              method: 'POST',
+              headers: new Headers({
+                'content-type': 'application/json',
+                cookie: csrfCookie
+              }),
+              body: JSON.stringify({
+                email: email,
+                password: password,
+                csrfToken: csrfToken,
+                callbackUrl: credentials.callbackUrl
+              })
+            });
+            _context.next = 33;
+            return handlers.POST(postReq);
+          case 33:
+            loginRes = _context.sent;
+            authCookie = loginRes == null ? void 0 : loginRes.headers.get('set-cookie');
+            if (authCookie) {
+              _context.next = 37;
+              break;
+            }
+            throw new Error('authentication failed');
+          case 37:
+            expect(authCookie).toContain('nile.session-token=');
+            _ref3 = (_exec = /(nile\.session-token=.+?);/.exec(authCookie)) != null ? _exec : [], token = _ref3[1];
+            return _context.abrupt("return", new Headers({
+              cookie: [token, csrfCookie].join('; ')
+            }));
+          case 40:
           case "end":
             return _context.stop();
         }
-      }, _callee, this);
+      }, _callee);
     }));
-    function init(_x) {
-      return _init2.apply(this, arguments);
+    function login(_x) {
+      return _login.apply(this, arguments);
     }
-    return init;
+    return login;
   }();
-  /**
-   * A utility function if you want to manage different NileDB instances yourself
-   * returns the global Server object, an existing server that's already been configured,
-   * or a new one if the config isn't in the cache
-   */
-  _proto.getInstance = function getInstance(config) {
-    var _config = _extends({}, this.config, config);
-    var serverId = getServerId(_config);
-    var currentServerId = makeServerId(this.config);
-    if (serverId === currentServerId) {
-      return this;
-    }
-    var existing = this.servers.get(serverId);
-    if (existing) {
-      // be sure the config is up to date
-      var updatedConfig = new Config(_config);
-      existing.setConfig(updatedConfig);
-      // propagage special config items
-      existing.tenantId = updatedConfig.tenantId;
-      existing.userId = updatedConfig.userId;
-      existing.token = updatedConfig.api.token;
-      existing.databaseId = updatedConfig.databaseId;
-      return existing;
-    }
-    this.servers.set(serverId, new Server(_config));
-    return this.servers.get(serverId);
+}
+
+var appRoutes = function appRoutes(prefix) {
+  if (prefix === void 0) {
+    prefix = '/api';
+  }
+  return {
+    SIGNIN: prefix + "/auth/signin",
+    PROVIDERS: prefix + "/auth/providers",
+    SESSION: prefix + "/auth/session",
+    CSRF: prefix + "/auth/csrf",
+    CALLBACK: prefix + "/auth/callback",
+    SIGNOUT: prefix + "/auth/signout",
+    ERROR: prefix + "/auth/error",
+    ME: prefix + "/me",
+    USERS: prefix + "/users",
+    TENANTS: prefix + "/tenants",
+    TENANT_USER: prefix + "/tenants/{tenantId}/users/{userId}",
+    TENANT_USERS: prefix + "/tenants/{tenantId}/users",
+    SIGNUP: prefix + "/signup"
   };
-  return _createClass(Server, [{
-    key: "databaseId",
-    set: function set(val) {
-      if (val) {
-        this.config.databaseId = val;
-        this.api.auth.databaseId = val;
-        this.api.users.databaseId = val;
-        this.api.tenants.databaseId = val;
-      }
-    }
-  }, {
-    key: "userId",
-    get: function get() {
-      return this.config.userId;
-    },
-    set: function set(userId) {
-      this.databaseId = this.config.databaseId;
-      this.config.userId = userId;
-      if (this.api) {
-        this.api.auth.userId = this.config.userId;
-        this.api.users.userId = this.config.userId;
-        this.api.tenants.userId = this.config.userId;
-      }
-    }
-  }, {
-    key: "tenantId",
-    get: function get() {
-      return this.config.tenantId;
-    },
-    set: function set(tenantId) {
-      this.databaseId = this.config.databaseId;
-      this.config.tenantId = tenantId;
-      if (this.api) {
-        this.api.auth.tenantId = tenantId;
-        this.api.users.tenantId = tenantId;
-        this.api.tenants.tenantId = tenantId;
+};
+
+var NILEDB_API_URL = process.env.NILEDB_API_URL;
+function makeRestUrl(path, qp) {
+  if (!NILEDB_API_URL) {
+    throw new Error('An API url is required. Set it via NILEDB_API_URL.');
+  }
+  var params = new URLSearchParams(qp);
+  return "" + [NILEDB_API_URL, path.substring(1, path.length)].join('/') + (qp ? "?" + params.toString() : '');
+}
+
+var apiRoutes = {
+  ME: /*#__PURE__*/makeRestUrl('/me'),
+  USERS: function USERS(tenantId) {
+    return makeRestUrl('/users', tenantId ? {
+      tenantId: tenantId
+    } : undefined);
+  },
+  USER: function USER(userId) {
+    return makeRestUrl("/users/" + userId);
+  },
+  TENANTS: /*#__PURE__*/makeRestUrl('/tenants'),
+  TENANT: function TENANT(tenantId) {
+    return makeRestUrl("/tenants/" + tenantId);
+  },
+  SIGNUP: /*#__PURE__*/makeRestUrl('/signup'),
+  TENANT_USERS: function TENANT_USERS(tenantId) {
+    return makeRestUrl("/tenants/" + tenantId + "/users");
+  },
+  TENANT_USER: function TENANT_USER(tenantId, userId) {
+    return makeRestUrl("/tenants/" + tenantId + "/users/" + userId);
+  },
+  USER_TENANTS: function USER_TENANTS(userId) {
+    return makeRestUrl("/users/" + userId + "/tenants");
+  }
+};
+
+function urlMatches(requestUrl, route) {
+  var url = new URL(requestUrl);
+  return url.pathname.startsWith(route);
+}
+
+var _excluded = ["request"];
+// const { log } = console;
+function request(_x, _x2) {
+  return _request.apply(this, arguments);
+}
+function _request() {
+  _request = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(url, _init) {
+    var request, init, requestUrl, updatedHeaders, params, _init$body, res;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          request = _init.request, init = _objectWithoutPropertiesLoose(_init, _excluded);
+          requestUrl = new URL(request.url);
+          updatedHeaders = new Headers(request.headers); // updatedHeaders.delete('content-length');
+          // updatedHeaders.delete('transfer-encoding');
+          updatedHeaders.set('niledb-origin', requestUrl.origin);
+          updatedHeaders.set('niledb-creds', Buffer.from(process.env.NILEDB_USER + ":" + process.env.NILEDB_PASSWORD).toString('base64'));
+          params = _extends({}, init, {
+            headers: updatedHeaders
+          });
+          if (params.method === 'POST' || params.method === 'PUT') {
+            updatedHeaders.set('content-type', 'text/plain;charset=UTF-8');
+            params.body = (_init$body = init.body) != null ? _init$body : request.body;
+            // @ts-expect-error - its there
+            params.duplex = 'half';
+          }
+          // log(`[${params.method ?? 'GET'}]`, url);
+          _context.next = 9;
+          return fetch(url, _extends({}, params))["catch"](function () {
+            // log('An error has occurred in the fetch', e);
+          });
+        case 9:
+          res = _context.sent;
+          return _context.abrupt("return", res);
+        case 11:
+        case "end":
+          return _context.stop();
       }
-    }
-  }, {
-    key: "token",
-    get: function get() {
-      var _this$config;
-      return (_this$config = this.config) == null || (_this$config = _this$config.api) == null ? void 0 : _this$config.token;
-    },
-    set: function set(token) {
-      if (token) {
-        this.config.api.token = token;
-        if (this.api) {
-          this.api.auth.api.token = token;
-          this.api.users.api.token = token;
-          this.api.tenants.api.token = token;
-        }
+    }, _callee);
+  }));
+  return _request.apply(this, arguments);
+}
+
+var key$6 = 'ME';
+var url = apiRoutes[key$6];
+/**
+ * @swagger
+ * /api/me:
+ *   get:
+ *     summary: Identify the principal
+ *     description: Returns information about the principal associated with the session
+ *       provided
+ *     operationId: me
+ *     responses:
+ *       "200":
+ *         description: Identified user
+ *         content:
+ *           application/json:
+ *             schema:
+ *               $ref: '#/components/schemas/User'
+ *       "400":
+ *         description: API/Database failures
+ *         content:
+ *           text/plain:
+ *             schema:
+ *               type: string
+ *       "404":
+ *         description: Not found
+ *         content: {}
+ *       "401":
+ *         description: Unauthorized
+ *         content: {}
+ */
+function GET$3(_x, _x2) {
+  return _GET$3.apply(this, arguments);
+}
+function _GET$3() {
+  _GET$3 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(init, log) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          log('[GET]');
+          _context.next = 3;
+          return request(url, init);
+        case 3:
+          return _context.abrupt("return", _context.sent);
+        case 4:
+        case "end":
+          return _context.stop();
       }
-    }
-  }, {
-    key: "db",
-    get: function get() {
-      // only need to interact with the knex object
-      return this.manager.getConnection(this.config);
-    }
-  }]);
-}();
-function create(_x2) {
-  return _create.apply(this, arguments);
+    }, _callee);
+  }));
+  return _GET$3.apply(this, arguments);
 }
-function _create() {
-  _create = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(config) {
-    var server;
+function route$a(_x3, _x4) {
+  return _route$a.apply(this, arguments);
+}
+function _route$a() {
+  _route$a = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(request, config) {
+    var _Logger, info;
     return _regeneratorRuntime().wrap(function _callee2$(_context2) {
       while (1) switch (_context2.prev = _context2.next) {
         case 0:
-          server = new Server(config);
-          _context2.next = 3;
-          return server.init();
-        case 3:
-          return _context2.abrupt("return", _context2.sent);
+          _Logger = Logger(_extends({}, config, {
+            debug: config.debug
+          }), '[ROUTES]', "[" + key$6 + "]"), info = _Logger.info;
+          _context2.t0 = request.method;
+          _context2.next = _context2.t0 === 'GET' ? 4 : 7;
+          break;
         case 4:
+          _context2.next = 6;
+          return GET$3({
+            request: request
+          }, info);
+        case 6:
+          return _context2.abrupt("return", _context2.sent);
+        case 7:
+          return _context2.abrupt("return", new Response('method not allowed', {
+            status: 405
+          }));
+        case 8:
         case "end":
           return _context2.stop();
       }
     }, _callee2);
   }));
+  return _route$a.apply(this, arguments);
+}
+function matches$a(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$6]);
+}
+
+function auth(_x, _x2) {
+  return _auth.apply(this, arguments);
+}
+function _auth() {
+  _auth = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+    var _Logger, info, sessionUrl, res;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _Logger = Logger(_extends({}, config, {
+            debug: true
+          }), '[nileauth]'), info = _Logger.info;
+          info('checking auth');
+          sessionUrl = config.api.basePath + "/auth/session";
+          info('using session', sessionUrl);
+          _context.next = 6;
+          return request(sessionUrl, {
+            request: req
+          });
+        case 6:
+          res = _context.sent;
+          if (res) {
+            _context.next = 10;
+            break;
+          }
+          info('no session found');
+          return _context.abrupt("return", undefined);
+        case 10:
+          info('session active');
+          _context.next = 13;
+          return new Response(res.body).json();
+        case 13:
+          return _context.abrupt("return", _context.sent);
+        case 14:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _auth.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/users:
+ *   post:
+ *     tags:
+ *       - users
+ *     summary: Creates a user
+ *     description: Creates a user in the database
+ *     operationId: createUser
+ *     parameters:
+ *       - name: tenantId
+ *         description: A tenant id to add the user to when they are created
+ *         in: query
+ *         schema:
+ *           type: string
+ *       - name: newTenantName
+ *         description: A tenant name to create, then the user to when they are created
+ *         in: query
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       description: |-
+ *         The email and password combination the user will use to authenticate.
+ *         The `name` is optional; if provided it will be recorded in the `users` table.
+ *         The `newTenant` is optional; if provided, it is used as the name of a new tenant record associated with the newly created user.
+ *       content:
+ *         application/json:
+ *           schema:
+ *             $ref: '#/components/schemas/CreateBasicUserRequest'
+ *           examples:
+ *             Create User Request:
+ *               summary: Creates a user with basic credentials
+ *               description: Create User Request
+ *               value:
+ *                 email: a.user@somedomain.com
+ *                 password: somepassword
+ *                 name: A. User
+ *             Create User Request with Tenant:
+ *               summary: Creates a user and a new tenant for that user
+ *               description: Create User Request with Tenant
+ *               value:
+ *                 email: a.user@somedomain.com
+ *                 password: somepassword
+ *                 name: A. User
+ *                 newTenant: My Sandbox
+ *     responses:
+ *       "201":
+ *         description: User created
+ *         content:
+ *           application/json:
+ *             schema:
+ *               $ref: "#/components/schemas/User"
+ *       "400":
+ *         description: API/Database failures
+ *         content:
+ *           text/plain:
+ *             schema:
+ *               type: string
+ *       "401":
+ *         description: Unauthorized
+ *         content: {}
+ */
+function POST$2(_x, _x2, _x3) {
+  return _POST$2.apply(this, arguments);
+}
+function _POST$2() {
+  _POST$2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, tenantId, tenant, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          if (session) {
+            _context.next = 2;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 401
+          }));
+        case 2:
+          init.body = init.request.body;
+          init.method = 'POST';
+          yurl = new URL(init.request.url);
+          tenantId = yurl.searchParams.get('tenantId');
+          tenant = tenantId != null ? tenantId : getTenantFromHttp(init.request.headers);
+          url = apiRoutes.USERS(tenant ? tenant : undefined);
+          log && log('[POST]', url);
+          _context.next = 11;
+          return request(url, init);
+        case 11:
+          return _context.abrupt("return", _context.sent);
+        case 12:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _POST$2.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/users:
+ *   get:
+ *     tags:
+ *     - users
+ *     summary: lists users in the tenant
+ *     description: Returns information about the users within the tenant
+ *       provided. You can also pass the a `niledb-tenantId` in the header or in a cookie.
+ *     operationId: listUsers
+ *     parameters:
+ *       - name: tenantId
+ *         in: query
+ *         schema:
+ *           type: string
+ *     responses:
+ *       "200":
+ *         description: A list of users
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: array
+ *               items:
+ *                $ref: '#/components/schemas/TenantUser'
+ *       "404":
+ *         description: Not found
+ *         content: {}
+ *       "401":
+ *         description: Unauthorized
+ *         content: {}
+ */
+function GET$2(_x, _x2) {
+  return _GET$2.apply(this, arguments);
+}
+function _GET$2() {
+  _GET$2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(init, log) {
+    var yurl, tenantId, tenant, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url);
+          tenantId = yurl.searchParams.get('tenantId');
+          tenant = tenantId != null ? tenantId : getTenantFromHttp(init.request.headers);
+          if (tenant) {
+            _context.next = 6;
+            break;
+          }
+          log('[GET]', '[ERROR]', 'No tenant id provided.');
+          return _context.abrupt("return", new Response(null, {
+            status: 404
+          }));
+        case 6:
+          url = apiRoutes.TENANT_USERS(tenant);
+          log('[GET]', url);
+          init.method = 'GET';
+          _context.next = 11;
+          return request(url, init);
+        case 11:
+          return _context.abrupt("return", _context.sent);
+        case 12:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _GET$2.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/users/{userid}:
+ *   put:
+ *     tags:
+ *     - users
+ *     summary: update a user
+ *     description: updates a user within the tenant
+ *     operationId: updateUser
+ *     parameters:
+ *       - name: userid
+ *         in: path
+ *         required: true
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       description: |-
+ *         Update a user
+ *       content:
+ *         application/json:
+ *           schema:
+ *             $ref: '#/components/schemas/UpdateUserRequest'
+ *     responses:
+ *       "200":
+ *         description: An updated user
+ *         content:
+ *           application/json:
+ *             schema:
+ *               $ref: '#/components/schemas/User'
+ *       "404":
+ *         description: Not found
+ *         content: {}
+ *       "401":
+ *         description: Unauthorized
+ *         content: {}
+ */
+function PUT$1(_x, _x2, _x3) {
+  return _PUT$1.apply(this, arguments);
+}
+function _PUT$1() {
+  _PUT$1 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var _URL$pathname$split$r, userId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          if (session) {
+            _context.next = 2;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 401
+          }));
+        case 2:
+          init.body = init.request.body;
+          init.method = 'PUT';
+          // update the user
+          _URL$pathname$split$r = new URL(init.request.url).pathname.split('/').reverse(), userId = _URL$pathname$split$r[0];
+          url = apiRoutes.USER(userId);
+          log('[PUT]', url);
+          _context.next = 9;
+          return request(url, init);
+        case 9:
+          return _context.abrupt("return", _context.sent);
+        case 10:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _PUT$1.apply(this, arguments);
+}
+
+var key$5 = 'USERS';
+function route$9(_x, _x2) {
+  return _route$9.apply(this, arguments);
+}
+function _route$9() {
+  _route$9 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+    var _Logger, info, session;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _Logger = Logger(_extends({}, config, {
+            debug: config.debug
+          }), '[ROUTES]', "[" + key$5 + "]"), info = _Logger.info;
+          _context.next = 3;
+          return auth(request, config);
+        case 3:
+          session = _context.sent;
+          _context.t0 = request.method;
+          _context.next = _context.t0 === 'GET' ? 7 : _context.t0 === 'POST' ? 10 : _context.t0 === 'PUT' ? 13 : 16;
+          break;
+        case 7:
+          _context.next = 9;
+          return GET$2({
+            request: request
+          }, info);
+        case 9:
+          return _context.abrupt("return", _context.sent);
+        case 10:
+          _context.next = 12;
+          return POST$2(session, {
+            request: request
+          }, info);
+        case 12:
+          return _context.abrupt("return", _context.sent);
+        case 13:
+          _context.next = 15;
+          return PUT$1(session, {
+            request: request
+          }, info);
+        case 15:
+          return _context.abrupt("return", _context.sent);
+        case 16:
+          return _context.abrupt("return", new Response('method not allowed', {
+            status: 405
+          }));
+        case 17:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$9.apply(this, arguments);
+}
+function matches$9(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$5]);
+}
+
+/**
+ * @swagger
+ * /api/tenants/{tenantId}/users:
+ *  get:
+ *    tags:
+ *    - users
+ *    summary: List tenant users
+ *    description: Lists users that are associated with the specified tenant.
+ *    operationId: listTenantUsers
+ *    parameters:
+ *    - name: tenantId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ *    responses:
+ *      "200":
+ *        description: Users found
+ *        content:
+ *          application/json:
+ *            schema:
+ *              type: array
+ *              items:
+ *                $ref: '#/components/schemas/User'
+ *      "401":
+ *        description: Unauthorized
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/APIError'
+ */
+function GET$1(_x, _x2, _x3) {
+  return _GET$1.apply(this, arguments);
+}
+function _GET$1() {
+  _GET$1 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, _yurl$pathname$split$, tenantId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url);
+          _yurl$pathname$split$ = yurl.pathname.split('/').reverse(), tenantId = _yurl$pathname$split$[1];
+          if (tenantId) {
+            _context.next = 4;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 404
+          }));
+        case 4:
+          url = "" + apiRoutes.TENANT_USERS(tenantId);
+          log('[GET]', '[TENANT_USERS]', url);
+          _context.next = 8;
+          return request(url, init);
+        case 8:
+          return _context.abrupt("return", _context.sent);
+        case 9:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _GET$1.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/tenants/{tenantId}/users:
+ *   post:
+ *    tags:
+ *    - users
+ *    summary: Create a user in a tenant
+ *    description: Creates a new user and associates that user with the specified
+ *      tenant.
+ *    operationId: createTenantUser
+ *    parameters:
+ *    - name: tenantId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ *    requestBody:
+ *      description: |
+ *        The email and password combination the user will use to authenticate.
+ *        The `name` is optional; if provided it will be recorded in the `users` table.
+ *      content:
+ *        application/json:
+ *          schema:
+ *            $ref: '#/components/schemas/CreateBasicUserRequest'
+ *          examples:
+ *            Create User Request:
+ *              summary: Creates a user with basic credentials
+ *              description: Create User Request
+ *              value:
+ *                email: a.user@somedomain.com
+ *                password: somepassword
+ *                name: A. User
+ *    responses:
+ *      "201":
+ *        description: User created
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/User'
+ */
+function POST$1(_x, _x2, _x3) {
+  return _POST$1.apply(this, arguments);
+}
+function _POST$1() {
+  _POST$1 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, _yurl$pathname$split$, tenantId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url);
+          _yurl$pathname$split$ = yurl.pathname.split('/').reverse(), tenantId = _yurl$pathname$split$[1]; // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+          // @ts-ignore
+          init.body = JSON.stringify({
+            email: session.email
+          });
+          init.method = 'PUT';
+          url = apiRoutes.TENANT_USERS(tenantId);
+          log('[PUT]', url);
+          _context.next = 8;
+          return request(url, init);
+        case 8:
+          return _context.abrupt("return", _context.sent);
+        case 9:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _POST$1.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/tenants/{tenantId}/users/{userId}:
+ *   delete:
+ *    tags:
+ *    - tenants
+ *    summary: removes a user from a tenant
+ *    description: removes an associated user from a specified
+ *      tenant.
+ *    operationId: unlinkUser
+ *    parameters:
+ *    - name: tenantId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ *    - name: userId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ 
+ *    responses:
+ *      "204":
+ *        description: User removed
+ */
+function DELETE$1(_x, _x2, _x3) {
+  return _DELETE$1.apply(this, arguments);
+}
+function _DELETE$1() {
+  _DELETE$1 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, _yurl$pathname$split$, userId, tenantId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url); // eslint-disable-next-line @typescript-eslint/no-unused-vars
+          _yurl$pathname$split$ = yurl.pathname.split('/').reverse(), userId = _yurl$pathname$split$[0], tenantId = _yurl$pathname$split$[2];
+          if (tenantId) {
+            _context.next = 4;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 404
+          }));
+        case 4:
+          init.method = 'DELETE';
+          url = "" + apiRoutes.TENANT_USER(tenantId, userId);
+          log('[DELETE]', url);
+          _context.next = 9;
+          return request(url, init);
+        case 9:
+          return _context.abrupt("return", _context.sent);
+        case 10:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _DELETE$1.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/tenants/{tenantId}/users:
+ *   put:
+ *    tags:
+ *    - tenants
+ *    summary: associates an existing user with the tenant
+ *    operationId: linkUser
+ *    parameters:
+ *    - name: tenantId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ *    requestBody:
+ *      description: |
+ *        The email and password combination the user will use to authenticate.
+ *        The `name` is optional; if provided it will be recorded in the `users` table.
+ *      content:
+ *        application/json:
+ *          schema:
+ *            $ref: '#/components/schemas/AssociateUserRequest'
+ *    responses:
+ *      "201":
+ *        description: add user to tenant
+ */
+function PUT(_x, _x2, _x3) {
+  return _PUT.apply(this, arguments);
+}
+function _PUT() {
+  _PUT = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, _yurl$pathname$split$, tenantId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url);
+          _yurl$pathname$split$ = yurl.pathname.split('/').reverse(), tenantId = _yurl$pathname$split$[1];
+          if (tenantId) {
+            _context.next = 4;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 404
+          }));
+        case 4:
+          init.method = 'PUT';
+          url = "" + apiRoutes.TENANT_USERS(tenantId);
+          log('[PUT]', url);
+          _context.next = 9;
+          return request(url, init);
+        case 9:
+          return _context.abrupt("return", _context.sent);
+        case 10:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _PUT.apply(this, arguments);
+}
+
+var key$4 = 'TENANT_USERS';
+function route$8(_x, _x2) {
+  return _route$8.apply(this, arguments);
+}
+function _route$8() {
+  _route$8 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+    var _Logger, info, session;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _Logger = Logger(_extends({}, config, {
+            debug: config.debug
+          }), '[ROUTES]', "[" + key$4 + "]"), info = _Logger.info;
+          _context.next = 3;
+          return auth(request, config);
+        case 3:
+          session = _context.sent;
+          if (session) {
+            _context.next = 7;
+            break;
+          }
+          info('401');
+          return _context.abrupt("return", new Response(null, {
+            status: 401
+          }));
+        case 7:
+          _context.t0 = request.method;
+          _context.next = _context.t0 === 'GET' ? 10 : _context.t0 === 'POST' ? 13 : _context.t0 === 'PUT' ? 16 : _context.t0 === 'DELETE' ? 19 : 22;
+          break;
+        case 10:
+          _context.next = 12;
+          return GET$1(session, {
+            request: request
+          }, info);
+        case 12:
+          return _context.abrupt("return", _context.sent);
+        case 13:
+          _context.next = 15;
+          return POST$1(session, {
+            request: request
+          }, info);
+        case 15:
+          return _context.abrupt("return", _context.sent);
+        case 16:
+          _context.next = 18;
+          return PUT(session, {
+            request: request
+          }, info);
+        case 18:
+          return _context.abrupt("return", _context.sent);
+        case 19:
+          _context.next = 21;
+          return DELETE$1(session, {
+            request: request
+          }, info);
+        case 21:
+          return _context.abrupt("return", _context.sent);
+        case 22:
+          return _context.abrupt("return", new Response('method not allowed', {
+            status: 405
+          }));
+        case 23:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$8.apply(this, arguments);
+}
+function matches$8(configRoutes, request) {
+  var url = new URL(request.url);
+  var _url$pathname$split$r = url.pathname.split('/').reverse(),
+    userId = _url$pathname$split$r[0],
+    possibleTenantId = _url$pathname$split$r[1],
+    tenantId = _url$pathname$split$r[2];
+  var route = configRoutes[key$4].replace('{tenantId}', tenantId).replace('{userId}', userId);
+  if (userId === 'users') {
+    route = configRoutes[key$4].replace('{tenantId}', possibleTenantId);
+  }
+  return urlMatches(request.url, route);
+}
+
+/**
+ * @swagger
+ * /api/tenants:
+ *   get:
+ *     tags:
+ *       - tenants
+ *     summary: list tenants by user
+ *     description: Creates a user in the database
+ *     operationId: listTenants
+ *     responses:
+ *       "200":
+ *         description: a list of tenants
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: array
+ *               items:
+ *                $ref: "#/components/schemas/Tenant"
+ *       "400":
+ *         description: API/Database failures
+ *         content:
+ *           text/plain:
+ *             schema:
+ *               type: string
+ *       "401":
+ *         description: Unauthorized
+ *         content: {}
+ */
+function GET(_x, _x2, _x3) {
+  return _GET.apply(this, arguments);
+}
+function _GET() {
+  _GET = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          url = "" + apiRoutes.USER_TENANTS(session.id);
+          log('[GET]', url);
+          _context.next = 4;
+          return request(url, init);
+        case 4:
+          return _context.abrupt("return", _context.sent);
+        case 5:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _GET.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/tenants/{tenantId}:
+ *   delete:
+ *    tags:
+ *    - tenants
+ *    summary: Deletes a tenant.
+ *    operationId: deleteTenant
+ *    parameters:
+ *    - name: tenantId
+ *      in: path
+ *      required: true
+ *      schema:
+ *        type: string
+ *    responses:
+ *      "204":
+ *        description: Tenant deleted
+ *      "401":
+ *        description: Unauthorized
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/APIError'
+ *      "404":
+ *        description: Tenant not found
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/APIError'
+ */
+function DELETE(_x, _x2, _x3) {
+  return _DELETE.apply(this, arguments);
+}
+function _DELETE() {
+  _DELETE = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var yurl, _yurl$pathname$split$, tenantId, url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          yurl = new URL(init.request.url);
+          _yurl$pathname$split$ = yurl.pathname.split('/').reverse(), tenantId = _yurl$pathname$split$[0];
+          if (tenantId) {
+            _context.next = 4;
+            break;
+          }
+          return _context.abrupt("return", new Response(null, {
+            status: 404
+          }));
+        case 4:
+          init.method = 'DELETE';
+          url = "" + apiRoutes.TENANT(tenantId);
+          log('[DELETE]', url);
+          _context.next = 9;
+          return request(url, init);
+        case 9:
+          return _context.abrupt("return", _context.sent);
+        case 10:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _DELETE.apply(this, arguments);
+}
+
+/**
+ * @swagger
+ * /api/tenants:
+ *   post:
+ *    tags:
+ *    - tenants
+ *    summary: Create a tenant
+ *    description: Creates a new tenant in a database.
+ *    operationId: createTenant
+ *    requestBody:
+ *      description: A wrapper for the tenant name.
+ *      content:
+ *        application/json:
+ *          schema:
+ *            $ref: '#/components/schemas/CreateTenantRequest'
+ *          examples:
+ *            Create Tenant Request:
+ *              summary: Creates a named tenant
+ *              description: Create Tenant Request
+ *              value:
+ *                name: My Sandbox
+ *    responses:
+ *      "201":
+ *        description: Tenant created
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/Tenant'
+ *      "401":
+ *        description: Unauthorized
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/APIError'
+ *      "404":
+ *        description: Database not found
+ *        content:
+ *          application/json:
+ *            schema:
+ *              $ref: '#/components/schemas/APIError'
+ */
+function POST(_x, _x2, _x3) {
+  return _POST.apply(this, arguments);
+}
+function _POST() {
+  _POST = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(session, init, log) {
+    var url;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          init.body = init.request.body;
+          init.method = 'POST';
+          url = "" + apiRoutes.TENANTS;
+          log('[POST]', url);
+          _context.next = 6;
+          return request(url, init);
+        case 6:
+          return _context.abrupt("return", _context.sent);
+        case 7:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _POST.apply(this, arguments);
+}
+
+var key$3 = 'TENANTS';
+function route$7(_x, _x2) {
+  return _route$7.apply(this, arguments);
+}
+function _route$7() {
+  _route$7 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+    var _Logger, info, session;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _Logger = Logger(_extends({}, config, {
+            debug: config.debug
+          }), '[ROUTES]', "[" + key$3 + "]"), info = _Logger.info;
+          _context.next = 3;
+          return auth(request, config);
+        case 3:
+          session = _context.sent;
+          if (session) {
+            _context.next = 7;
+            break;
+          }
+          info('401');
+          return _context.abrupt("return", new Response(null, {
+            status: 401
+          }));
+        case 7:
+          _context.t0 = request.method;
+          _context.next = _context.t0 === 'GET' ? 10 : _context.t0 === 'POST' ? 13 : _context.t0 === 'DELETE' ? 16 : 19;
+          break;
+        case 10:
+          _context.next = 12;
+          return GET(session, {
+            request: request
+          }, info);
+        case 12:
+          return _context.abrupt("return", _context.sent);
+        case 13:
+          _context.next = 15;
+          return POST(session, {
+            request: request
+          }, info);
+        case 15:
+          return _context.abrupt("return", _context.sent);
+        case 16:
+          _context.next = 18;
+          return DELETE(session, {
+            request: request
+          }, info);
+        case 18:
+          return _context.abrupt("return", _context.sent);
+        case 19:
+          return _context.abrupt("return", new Response('method not allowed', {
+            status: 405
+          }));
+        case 20:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$7.apply(this, arguments);
+}
+function matches$7(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$3]);
+}
+
+var proxyRoutes = {
+  SIGNIN: /*#__PURE__*/makeRestUrl('/auth/signin'),
+  PROVIDERS: /*#__PURE__*/makeRestUrl('/auth/providers'),
+  SESSION: /*#__PURE__*/makeRestUrl('/auth/session'),
+  CSRF: /*#__PURE__*/makeRestUrl('/auth/csrf'),
+  CALLBACK: /*#__PURE__*/makeRestUrl('/auth/callback'),
+  SIGNOUT: /*#__PURE__*/makeRestUrl('/auth/signout'),
+  ERROR: /*#__PURE__*/makeRestUrl('/auth/error')
+};
+
+var key$2 = 'SIGNIN';
+function route$6(_x) {
+  return _route$6.apply(this, arguments);
+}
+function _route$6() {
+  _route$6 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1) {
+    var url, init, _URL$pathname$split$r, provider, passThroughUrl, params, res;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          url = proxyRoutes[key$2];
+          init = {
+            method: request$1.method
+          };
+          if (request$1.method === 'POST') {
+            init.body = request$1.body;
+            _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
+            url = proxyRoutes[key$2] + "/" + provider;
+          }
+          passThroughUrl = new URL(request$1.url);
+          params = new URLSearchParams(passThroughUrl.search);
+          url = "" + url + (params.toString() !== '' ? "?" + params.toString() : '');
+          _context.next = 8;
+          return request(url, _extends({}, init, {
+            request: request$1
+          }));
+        case 8:
+          res = _context.sent;
+          return _context.abrupt("return", res);
+        case 10:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$6.apply(this, arguments);
+}
+function matches$6(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$2]);
+}
+
+function route$5(_x) {
+  return _route$5.apply(this, arguments);
+}
+function _route$5() {
+  _route$5 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes.SESSION, {
+            method: req.method,
+            request: req
+          }));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$5.apply(this, arguments);
+}
+function matches$5(configRoutes, request) {
+  return urlMatches(request.url, configRoutes.SESSION);
+}
+
+function route$4(_x) {
+  return _route$4.apply(this, arguments);
+}
+function _route$4() {
+  _route$4 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes.PROVIDERS, {
+            method: req.method,
+            request: req
+          }));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$4.apply(this, arguments);
+}
+function matches$4(configRoutes, request) {
+  return urlMatches(request.url, configRoutes.PROVIDERS);
+}
+
+function route$3(_x) {
+  return _route$3.apply(this, arguments);
+}
+function _route$3() {
+  _route$3 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes.CSRF, {
+            method: req.method,
+            request: req
+          }));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$3.apply(this, arguments);
+}
+function matches$3(configRoutes, request) {
+  return urlMatches(request.url, configRoutes.CSRF);
+}
+
+var _console = console,
+  log = _console.log,
+  error = _console.error;
+function route$2(_x) {
+  return _route$2.apply(this, arguments);
+}
+function _route$2() {
+  _route$2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1) {
+    var _URL$pathname$split$r, provider, passThroughUrl, params, url, res, location;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
+          passThroughUrl = new URL(request$1.url);
+          params = new URLSearchParams(passThroughUrl.search);
+          url = proxyRoutes.CALLBACK + "/" + provider + (params.toString() !== '' ? "?" + params.toString() : '');
+          _context.next = 6;
+          return request(url, {
+            request: request$1,
+            method: request$1.method
+          })["catch"](function (e) {
+            error('an error has occurred in callback');
+            log(e);
+          });
+        case 6:
+          res = _context.sent;
+          location = res == null ? void 0 : res.headers.get('location');
+          if (!location) {
+            _context.next = 10;
+            break;
+          }
+          return _context.abrupt("return", new Response(res == null ? void 0 : res.body, {
+            status: 302,
+            headers: res == null ? void 0 : res.headers
+          }));
+        case 10:
+          return _context.abrupt("return", new Response(res == null ? void 0 : res.body, {
+            status: res == null ? void 0 : res.status,
+            headers: res == null ? void 0 : res.headers
+          }));
+        case 11:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$2.apply(this, arguments);
+}
+function matches$2(configRoutes, request) {
+  return urlMatches(request.url, configRoutes.CALLBACK);
+}
+
+var key$1 = 'SIGNOUT';
+function route$1(_x) {
+  return _route$1.apply(this, arguments);
+}
+function _route$1() {
+  _route$1 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1) {
+    var url, init, _URL$pathname$split$r, provider, res;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          url = proxyRoutes[key$1];
+          init = {
+            method: request$1.method
+          };
+          if (request$1.method === 'POST') {
+            init.body = request$1.body;
+            _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
+            url = proxyRoutes[key$1] + "/" + provider;
+          }
+          _context.next = 5;
+          return request(url, _extends({}, init, {
+            request: request$1
+          }));
+        case 5:
+          res = _context.sent;
+          return _context.abrupt("return", res);
+        case 7:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route$1.apply(this, arguments);
+}
+function matches$1(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$1]);
+}
+
+var key = 'ERROR';
+function route(_x) {
+  return _route.apply(this, arguments);
+}
+function _route() {
+  _route = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes[key], {
+            method: req.method,
+            request: req
+          }));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return _route.apply(this, arguments);
+}
+function matches(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key]);
+}
+
+function GETTER(configRoutes, config) {
+  return /*#__PURE__*/function () {
+    var _GET = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!matches$a(configRoutes, req)) {
+              _context.next = 2;
+              break;
+            }
+            return _context.abrupt("return", route$a(req, config));
+          case 2:
+            if (!matches$9(configRoutes, req)) {
+              _context.next = 4;
+              break;
+            }
+            return _context.abrupt("return", route$9(req, config));
+          case 4:
+            if (!matches$8(configRoutes, req)) {
+              _context.next = 6;
+              break;
+            }
+            return _context.abrupt("return", route$8(req, config));
+          case 6:
+            if (!matches$7(configRoutes, req)) {
+              _context.next = 8;
+              break;
+            }
+            return _context.abrupt("return", route$7(req, config));
+          case 8:
+            if (!matches$5(configRoutes, req)) {
+              _context.next = 10;
+              break;
+            }
+            return _context.abrupt("return", route$5(req));
+          case 10:
+            if (!matches$6(configRoutes, req)) {
+              _context.next = 12;
+              break;
+            }
+            return _context.abrupt("return", route$6(req));
+          case 12:
+            if (!matches$4(configRoutes, req)) {
+              _context.next = 14;
+              break;
+            }
+            return _context.abrupt("return", route$4(req));
+          case 14:
+            if (!matches$3(configRoutes, req)) {
+              _context.next = 16;
+              break;
+            }
+            return _context.abrupt("return", route$3(req));
+          case 16:
+            if (!matches$2(configRoutes, req)) {
+              _context.next = 18;
+              break;
+            }
+            return _context.abrupt("return", route$2(req));
+          case 18:
+            if (!matches$1(configRoutes, req)) {
+              _context.next = 20;
+              break;
+            }
+            return _context.abrupt("return", route$1(req));
+          case 20:
+            if (!matches(configRoutes, req)) {
+              _context.next = 22;
+              break;
+            }
+            return _context.abrupt("return", route(req));
+          case 22:
+            return _context.abrupt("return", new Response(null, {
+              status: 404
+            }));
+          case 23:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    function GET(_x) {
+      return _GET.apply(this, arguments);
+    }
+    return GET;
+  }();
+}
+
+function POSTER(configRoutes, config) {
+  return /*#__PURE__*/function () {
+    var _POST = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!matches$8(configRoutes, req)) {
+              _context.next = 2;
+              break;
+            }
+            return _context.abrupt("return", route$8(req, config));
+          case 2:
+            if (!matches$9(configRoutes, req)) {
+              _context.next = 4;
+              break;
+            }
+            return _context.abrupt("return", route$9(req, config));
+          case 4:
+            if (!matches$7(configRoutes, req)) {
+              _context.next = 6;
+              break;
+            }
+            return _context.abrupt("return", route$7(req, config));
+          case 6:
+            if (!matches$5(configRoutes, req)) {
+              _context.next = 8;
+              break;
+            }
+            return _context.abrupt("return", route$5(req));
+          case 8:
+            if (!matches$6(configRoutes, req)) {
+              _context.next = 10;
+              break;
+            }
+            return _context.abrupt("return", route$6(req));
+          case 10:
+            if (!matches$4(configRoutes, req)) {
+              _context.next = 12;
+              break;
+            }
+            return _context.abrupt("return", route$4(req));
+          case 12:
+            if (!matches$3(configRoutes, req)) {
+              _context.next = 14;
+              break;
+            }
+            return _context.abrupt("return", route$3(req));
+          case 14:
+            if (!matches$2(configRoutes, req)) {
+              _context.next = 16;
+              break;
+            }
+            return _context.abrupt("return", route$2(req));
+          case 16:
+            if (!matches$1(configRoutes, req)) {
+              _context.next = 18;
+              break;
+            }
+            return _context.abrupt("return", route$1(req));
+          case 18:
+            return _context.abrupt("return", new Response(null, {
+              status: 404
+            }));
+          case 19:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    function POST(_x) {
+      return _POST.apply(this, arguments);
+    }
+    return POST;
+  }();
+}
+
+function DELETER(configRoutes, config) {
+  return /*#__PURE__*/function () {
+    var _DELETE = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!matches$8(configRoutes, req)) {
+              _context.next = 2;
+              break;
+            }
+            return _context.abrupt("return", route$8(req, config));
+          case 2:
+            if (!matches$7(configRoutes, req)) {
+              _context.next = 4;
+              break;
+            }
+            return _context.abrupt("return", route$7(req, config));
+          case 4:
+            return _context.abrupt("return", new Response(null, {
+              status: 404
+            }));
+          case 5:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    function DELETE(_x) {
+      return _DELETE.apply(this, arguments);
+    }
+    return DELETE;
+  }();
+}
+
+function PUTER(configRoutes, config) {
+  return /*#__PURE__*/function () {
+    var _PUT = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!matches$8(configRoutes, req)) {
+              _context.next = 2;
+              break;
+            }
+            return _context.abrupt("return", route$8(req, config));
+          case 2:
+            if (!matches$9(configRoutes, req)) {
+              _context.next = 4;
+              break;
+            }
+            return _context.abrupt("return", route$9(req, config));
+          case 4:
+            if (!matches$7(configRoutes, req)) {
+              _context.next = 6;
+              break;
+            }
+            return _context.abrupt("return", route$7(req, config));
+          case 6:
+            return _context.abrupt("return", new Response(null, {
+              status: 404
+            }));
+          case 7:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    function PUT(_x) {
+      return _PUT.apply(this, arguments);
+    }
+    return PUT;
+  }();
+}
+
+function Handlers(configRoutes, config) {
+  var GET = GETTER(configRoutes, config);
+  var POST = POSTER(configRoutes, config);
+  var DELETE = DELETER(configRoutes, config);
+  var PUT = PUTER(configRoutes, config);
+  return {
+    GET: GET,
+    POST: POST,
+    DELETE: DELETE,
+    PUT: PUT
+  };
+}
+
+var Api = /*#__PURE__*/function () {
+  function Api(config) {
+    this.config = void 0;
+    this.users = void 0;
+    this.tenants = void 0;
+    this.routes = void 0;
+    this.handlers = void 0;
+    this.config = config;
+    this.users = new Users(config);
+    this.tenants = new Tenants(config);
+    this.routes = _extends({}, appRoutes(config == null ? void 0 : config.routePrefix), config == null ? void 0 : config.routes);
+    this.handlers = Handlers(this.routes, config);
+  }
+  var _proto = Api.prototype;
+  _proto.login = /*#__PURE__*/function () {
+    var _login = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(payload) {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            _context.next = 2;
+            return serverAuth(this.config, this.handlers)(payload);
+          case 2:
+            this.headers = _context.sent;
+          case 3:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee, this);
+    }));
+    function login(_x) {
+      return _login.apply(this, arguments);
+    }
+    return login;
+  }();
+  return _createClass(Api, [{
+    key: "headers",
+    set: function set(headers) {
+      this.users = new Users(this.config, headers);
+      this.tenants = new Tenants(this.config, headers);
+    }
+  }]);
+}();
+var Server = /*#__PURE__*/function () {
+  function Server(config) {
+    var _this = this;
+    this.config = void 0;
+    this.api = void 0;
+    this.manager = void 0;
+    this.servers = void 0;
+    this.config = new Config(config, '[initial config]');
+    this.servers = new Map();
+    this.api = new Api(this.config);
+    this.manager = new DBManager(this.config);
+    watchTenantId(function (tenantId) {
+      _this.tenantId = tenantId;
+    });
+    watchUserId(function (userId) {
+      _this.userId = userId;
+    });
+    watchToken(function (token) {
+      _this.token = token;
+    });
+  }
+  var _proto2 = Server.prototype;
+  _proto2.setConfig = function setConfig(cfg) {
+    this.config = new Config(cfg);
+  };
+  _proto2.init = /*#__PURE__*/function () {
+    var _init = /*#__PURE__*/_asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(cfg) {
+      var updatedConfig;
+      return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+        while (1) switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.next = 2;
+            return this.config.configure(_extends({}, this.config, cfg));
+          case 2:
+            updatedConfig = _context2.sent;
+            this.setConfig(updatedConfig);
+            this.manager.clear(this.config);
+            this.manager = new DBManager(this.config);
+            this.api = new Api(this.config);
+            return _context2.abrupt("return", this);
+          case 8:
+          case "end":
+            return _context2.stop();
+        }
+      }, _callee2, this);
+    }));
+    function init(_x2) {
+      return _init.apply(this, arguments);
+    }
+    return init;
+  }();
+  /**
+   * A utility function if you want to manage different NileDB instances yourself
+   * returns the global Server object, an existing server that's already been configured,
+   * or a new one if the config isn't in the cache
+   */
+  _proto2.getInstance = function getInstance(config) {
+    var _config = _extends({}, this.config, config);
+    var serverId = getServerId(_config);
+    var currentServerId = makeServerId(this.config);
+    if (serverId === currentServerId) {
+      return this;
+    }
+    var existing = this.servers.get(serverId);
+    if (existing) {
+      // be sure the config is up to date
+      var updatedConfig = new Config(_config);
+      existing.setConfig(updatedConfig);
+      // propagate special config items
+      existing.tenantId = updatedConfig.tenantId;
+      existing.userId = updatedConfig.userId;
+      existing.token = updatedConfig.api.token;
+      existing.databaseId = updatedConfig.databaseId;
+      return existing;
+    }
+    this.servers.set(serverId, new Server(_config));
+    return this.servers.get(serverId);
+  };
+  return _createClass(Server, [{
+    key: "databaseId",
+    set: function set(val) {
+      if (val) {
+        this.config.databaseId = val;
+        this.api.users.databaseId = val;
+        this.api.tenants.databaseId = val;
+      }
+    }
+  }, {
+    key: "userId",
+    get: function get() {
+      return this.config.userId;
+    },
+    set: function set(userId) {
+      this.databaseId = this.config.databaseId;
+      this.config.userId = userId;
+      if (this.api) {
+        this.api.users.userId = this.config.userId;
+        this.api.tenants.userId = this.config.userId;
+      }
+    }
+  }, {
+    key: "tenantId",
+    get: function get() {
+      return this.config.tenantId;
+    },
+    set: function set(tenantId) {
+      this.databaseId = this.config.databaseId;
+      this.config.tenantId = tenantId;
+      if (this.api) {
+        this.api.users.tenantId = tenantId;
+        this.api.tenants.tenantId = tenantId;
+      }
+    }
+  }, {
+    key: "token",
+    get: function get() {
+      var _this$config;
+      return (_this$config = this.config) == null || (_this$config = _this$config.api) == null ? void 0 : _this$config.token;
+    },
+    set: function set(token) {
+      if (token) {
+        this.config.api.token = token;
+        if (this.api) {
+          this.api.users.api.token = token;
+          this.api.tenants.api.token = token;
+        }
+      }
+    }
+  }, {
+    key: "db",
+    get: function get() {
+      // only need to interact with the knex object
+      return this.manager.getConnection(this.config);
+    }
+  }]);
+}();
+function create(_x3) {
+  return _create.apply(this, arguments);
+}
+function _create() {
+  _create = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(config) {
+    var server;
+    return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+      while (1) switch (_context3.prev = _context3.next) {
+        case 0:
+          server = new Server(config);
+          _context3.next = 3;
+          return server.init();
+        case 3:
+          return _context3.abrupt("return", _context3.sent);
+        case 4:
+        case "end":
+          return _context3.stop();
+      }
+    }, _callee3);
+  }));
   return _create.apply(this, arguments);
 }