@niledatabase/server 3.0.0-alpha.36 → 3.0.0-alpha.38

package/dist/server.cjs.development.js

@@ -501,6 +501,12 @@ var getUsername = function getUsername(cfg) {
     logger && info(logger + "[config] " + config.user);
     return String(config == null ? void 0 : config.user);
   }
+  if (process.env.NILEDB_POSTGRES_URL) {
+    var url = new URL(process.env.NILEDB_POSTGRES_URL);
+    if (url.username) {
+      return url.username;
+    }
+  }
   logger && info(logger + "[NILEDB_USER] " + process.env.NILEDB_USER);
   return process.env.NILEDB_USER;
 };
@@ -514,6 +520,12 @@ var getPassword = function getPassword(cfg) {
     log && info(logger + "[config] " + config.password);
     return String(config.password);
   }
+  if (process.env.NILEDB_POSTGRES_URL) {
+    var url = new URL(process.env.NILEDB_POSTGRES_URL);
+    if (url.password) {
+      return url.password;
+    }
+  }
   logger && info(logger + "[NILEDB_PASSWORD] " + process.env.NILEDB_PASSWORD);
   return process.env.NILEDB_PASSWORD;
 };
@@ -1389,7 +1401,7 @@ function _request() {
   return _request.apply(this, arguments);
 }
 
-var key$8 = 'ME';
+var key$9 = 'ME';
 /**
  * @swagger
  * /api/me:
@@ -1440,16 +1452,16 @@ function _GET$4() {
   }));
   return _GET$4.apply(this, arguments);
 }
-function route$b(_x4, _x5) {
-  return _route$b.apply(this, arguments);
+function route$c(_x4, _x5) {
+  return _route$c.apply(this, arguments);
 }
-function _route$b() {
-  _route$b = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(request, config) {
+function _route$c() {
+  _route$c = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(request, config) {
     var url;
     return _regeneratorRuntime().wrap(function _callee2$(_context2) {
       while (1) switch (_context2.prev = _context2.next) {
         case 0:
-          url = apiRoutes(config)[key$8];
+          url = apiRoutes(config)[key$9];
           _context2.t0 = request.method;
           _context2.next = _context2.t0 === 'GET' ? 4 : 7;
           break;
@@ -1470,10 +1482,10 @@ function _route$b() {
       }
     }, _callee2);
   }));
-  return _route$b.apply(this, arguments);
+  return _route$c.apply(this, arguments);
 }
-function matches$b(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$8]);
+function matches$c(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$9]);
 }
 
 function auth(_x, _x2) {
@@ -2011,19 +2023,19 @@ function _PUT$2() {
   return _PUT$2.apply(this, arguments);
 }
 
-var key$7 = 'USERS';
-function route$a(_x, _x2) {
-  return _route$a.apply(this, arguments);
+var key$8 = 'USERS';
+function route$b(_x, _x2) {
+  return _route$b.apply(this, arguments);
 }
-function _route$a() {
-  _route$a = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$b() {
+  _route$b = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$7 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$8 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2062,10 +2074,10 @@ function _route$a() {
       }
     }, _callee);
   }));
-  return _route$a.apply(this, arguments);
+  return _route$b.apply(this, arguments);
 }
-function matches$a(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$7]);
+function matches$b(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$8]);
 }
 
 /**
@@ -2300,19 +2312,19 @@ function _PUT$1() {
   return _PUT$1.apply(this, arguments);
 }
 
-var key$6 = 'TENANT_USERS';
-function route$9(_x, _x2) {
-  return _route$9.apply(this, arguments);
+var key$7 = 'TENANT_USERS';
+function route$a(_x, _x2) {
+  return _route$a.apply(this, arguments);
 }
-function _route$9() {
-  _route$9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$a() {
+  _route$a = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session, yurl, _yurl$pathname$split$, tenantId;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$6 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$7 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2378,17 +2390,17 @@ function _route$9() {
       }
     }, _callee);
   }));
-  return _route$9.apply(this, arguments);
+  return _route$a.apply(this, arguments);
 }
-function matches$9(configRoutes, request) {
+function matches$a(configRoutes, request) {
   var url = new URL(request.url);
   var _url$pathname$split$r = url.pathname.split('/').reverse(),
     userId = _url$pathname$split$r[0],
     possibleTenantId = _url$pathname$split$r[1],
     tenantId = _url$pathname$split$r[2];
-  var route = configRoutes[key$6].replace('{tenantId}', tenantId).replace('{userId}', userId);
+  var route = configRoutes[key$7].replace('{tenantId}', tenantId).replace('{userId}', userId);
   if (userId === 'users') {
-    route = configRoutes[key$6].replace('{tenantId}', possibleTenantId);
+    route = configRoutes[key$7].replace('{tenantId}', possibleTenantId);
   }
   return urlMatches(request.url, route);
 }
@@ -2723,19 +2735,19 @@ function isUUID(value) {
   var regex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5|7][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
   return regex.test(value);
 }
-var key$5 = 'TENANTS';
-function route$8(_x, _x2) {
-  return _route$8.apply(this, arguments);
+var key$6 = 'TENANTS';
+function route$9(_x, _x2) {
+  return _route$9.apply(this, arguments);
 }
-function _route$8() {
-  _route$8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$9() {
+  _route$9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session, _request$url$split$re, possibleTenantId;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$5 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$6 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2802,10 +2814,10 @@ function _route$8() {
       }
     }, _callee);
   }));
-  return _route$8.apply(this, arguments);
+  return _route$9.apply(this, arguments);
 }
-function matches$8(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$5]);
+function matches$9(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$6]);
 }
 
 var proxyRoutes = function proxyRoutes(config) {
@@ -2816,21 +2828,22 @@ var proxyRoutes = function proxyRoutes(config) {
     CSRF: makeRestUrl(config, '/auth/csrf'),
     CALLBACK: makeRestUrl(config, '/auth/callback'),
     SIGNOUT: makeRestUrl(config, '/auth/signout'),
-    ERROR: makeRestUrl(config, '/auth/error')
+    ERROR: makeRestUrl(config, '/auth/error'),
+    VERIFY_REQUEST: makeRestUrl(config, '/auth/verify-request')
   };
 };
 
-var key$4 = 'SIGNIN';
-function route$7(_x, _x2) {
-  return _route$7.apply(this, arguments);
+var key$5 = 'SIGNIN';
+function route$8(_x, _x2) {
+  return _route$8.apply(this, arguments);
 }
-function _route$7() {
-  _route$7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$8() {
+  _route$8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     var url, init, _URL$pathname$split$r, provider, passThroughUrl, params, res;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          url = proxyRoutes(config)[key$4];
+          url = proxyRoutes(config)[key$5];
           init = {
             method: req.method,
             headers: req.headers
@@ -2840,7 +2853,7 @@ function _route$7() {
               init.body = req.clone().body;
             }
             _URL$pathname$split$r = new URL(req.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
-            url = proxyRoutes(config)[key$4] + "/" + provider;
+            url = proxyRoutes(config)[key$5] + "/" + provider;
           }
           passThroughUrl = new URL(req.url);
           params = new URLSearchParams(passThroughUrl.search);
@@ -2858,17 +2871,17 @@ function _route$7() {
       }
     }, _callee);
   }));
-  return _route$7.apply(this, arguments);
+  return _route$8.apply(this, arguments);
 }
-function matches$7(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$4]);
+function matches$8(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$5]);
 }
 
-function route$6(_x, _x2) {
-  return _route$6.apply(this, arguments);
+function route$7(_x, _x2) {
+  return _route$7.apply(this, arguments);
 }
-function _route$6() {
-  _route$6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$7() {
+  _route$7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2882,17 +2895,17 @@ function _route$6() {
       }
     }, _callee);
   }));
-  return _route$6.apply(this, arguments);
+  return _route$7.apply(this, arguments);
 }
-function matches$6(configRoutes, request) {
+function matches$7(configRoutes, request) {
   return urlMatches(request.url, configRoutes.SESSION);
 }
 
-function route$5(_x, _x2) {
-  return _route$5.apply(this, arguments);
+function route$6(_x, _x2) {
+  return _route$6.apply(this, arguments);
 }
-function _route$5() {
-  _route$5 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$6() {
+  _route$6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2906,17 +2919,17 @@ function _route$5() {
       }
     }, _callee);
   }));
-  return _route$5.apply(this, arguments);
+  return _route$6.apply(this, arguments);
 }
-function matches$5(configRoutes, request) {
+function matches$6(configRoutes, request) {
   return urlMatches(request.url, configRoutes.PROVIDERS);
 }
 
-function route$4(_x, _x2) {
-  return _route$4.apply(this, arguments);
+function route$5(_x, _x2) {
+  return _route$5.apply(this, arguments);
 }
-function _route$4() {
-  _route$4 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$5() {
+  _route$5 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2930,25 +2943,25 @@ function _route$4() {
       }
     }, _callee);
   }));
-  return _route$4.apply(this, arguments);
+  return _route$5.apply(this, arguments);
 }
-function matches$4(configRoutes, request) {
+function matches$5(configRoutes, request) {
   return urlMatches(request.url, configRoutes.CSRF);
 }
 
-var key$3 = 'CALLBACK';
-function route$3(_x, _x2) {
-  return _route$3.apply(this, arguments);
+var key$4 = 'CALLBACK';
+function route$4(_x, _x2) {
+  return _route$4.apply(this, arguments);
 }
-function _route$3() {
-  _route$3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
+function _route$4() {
+  _route$4 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
     var _Logger, error, _URL$pathname$split$r, provider, passThroughUrl, params, url, res, location;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$3 + "]"), error = _Logger.error;
+          }), "[ROUTES][" + key$4 + "]"), error = _Logger.error;
           _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
           passThroughUrl = new URL(request$1.url);
           params = new URLSearchParams(passThroughUrl.search);
@@ -2982,30 +2995,30 @@ function _route$3() {
       }
     }, _callee);
   }));
-  return _route$3.apply(this, arguments);
+  return _route$4.apply(this, arguments);
 }
-function matches$3(configRoutes, request) {
+function matches$4(configRoutes, request) {
   return urlMatches(request.url, configRoutes.CALLBACK);
 }
 
-var key$2 = 'SIGNOUT';
-function route$2(_x, _x2) {
-  return _route$2.apply(this, arguments);
+var key$3 = 'SIGNOUT';
+function route$3(_x, _x2) {
+  return _route$3.apply(this, arguments);
 }
-function _route$2() {
-  _route$2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
+function _route$3() {
+  _route$3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
     var url, init, _URL$pathname$split$r, provider, res;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          url = proxyRoutes(config)[key$2];
+          url = proxyRoutes(config)[key$3];
           init = {
             method: request$1.method
           };
           if (request$1.method === 'POST') {
             init.body = request$1.body;
             _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
-            url = proxyRoutes(config)[key$2] + "/" + provider;
+            url = proxyRoutes(config)[key$3] + "/" + provider;
           }
           _context.next = 5;
           return request(url, _extends({}, init, {
@@ -3020,13 +3033,38 @@ function _route$2() {
       }
     }, _callee);
   }));
+  return _route$3.apply(this, arguments);
+}
+function matches$3(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$3]);
+}
+
+var key$2 = 'ERROR';
+function route$2(_x, _x2) {
+  return _route$2.apply(this, arguments);
+}
+function _route$2() {
+  _route$2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes(config)[key$2], {
+            method: req.method,
+            request: req
+          }, config));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
   return _route$2.apply(this, arguments);
 }
 function matches$2(configRoutes, request) {
   return urlMatches(request.url, configRoutes[key$2]);
 }
 
-var key$1 = 'ERROR';
+var key$1 = 'VERIFY_REQUEST';
 function route$1(_x, _x2) {
   return _route$1.apply(this, arguments);
 }
@@ -3060,88 +3098,95 @@ function GETTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$b(configRoutes, req)) {
+            if (!matches$c(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches me');
-            return _context.abrupt("return", route$b(req, config));
+            return _context.abrupt("return", route$c(req, config));
           case 3:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 6:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 9:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 12;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 12:
-            if (!matches$6(configRoutes, req)) {
+            if (!matches$7(configRoutes, req)) {
               _context.next = 15;
               break;
             }
             info('matches session');
-            return _context.abrupt("return", route$6(req, config));
+            return _context.abrupt("return", route$7(req, config));
           case 15:
-            if (!matches$7(configRoutes, req)) {
+            if (!matches$8(configRoutes, req)) {
               _context.next = 18;
               break;
             }
             info('matches signin');
-            return _context.abrupt("return", route$7(req, config));
+            return _context.abrupt("return", route$8(req, config));
           case 18:
-            if (!matches$5(configRoutes, req)) {
+            if (!matches$6(configRoutes, req)) {
               _context.next = 21;
               break;
             }
             info('matches providers');
-            return _context.abrupt("return", route$5(req, config));
+            return _context.abrupt("return", route$6(req, config));
           case 21:
-            if (!matches$4(configRoutes, req)) {
+            if (!matches$5(configRoutes, req)) {
               _context.next = 24;
               break;
             }
             info('matches csrf');
-            return _context.abrupt("return", route$4(req, config));
+            return _context.abrupt("return", route$5(req, config));
           case 24:
-            if (!matches$3(configRoutes, req)) {
+            if (!matches$4(configRoutes, req)) {
               _context.next = 27;
               break;
             }
             info('matches callback');
-            return _context.abrupt("return", route$3(req, config));
+            return _context.abrupt("return", route$4(req, config));
           case 27:
-            if (!matches$2(configRoutes, req)) {
+            if (!matches$3(configRoutes, req)) {
               _context.next = 30;
               break;
             }
             info('matches signout');
-            return _context.abrupt("return", route$2(req, config));
+            return _context.abrupt("return", route$3(req, config));
           case 30:
             if (!matches$1(configRoutes, req)) {
               _context.next = 33;
               break;
             }
-            info('matches error');
+            info('matches verify-request');
             return _context.abrupt("return", route$1(req, config));
           case 33:
+            if (!matches$2(configRoutes, req)) {
+              _context.next = 36;
+              break;
+            }
+            info('matches error');
+            return _context.abrupt("return", route$2(req, config));
+          case 36:
             warn('No GET routes matched');
             return _context.abrupt("return", new Response(null, {
               status: 404
             }));
-          case 35:
+          case 38:
           case "end":
             return _context.stop();
         }
@@ -3285,12 +3330,12 @@ function POSTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 3:
             if (!matches(configRoutes, req)) {
               _context.next = 6;
@@ -3299,61 +3344,61 @@ function POSTER(configRoutes, config) {
             info('matches signup');
             return _context.abrupt("return", route(req, config));
           case 6:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 9:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 12;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 12:
-            if (!matches$6(configRoutes, req)) {
+            if (!matches$7(configRoutes, req)) {
               _context.next = 15;
               break;
             }
             info('matches session');
-            return _context.abrupt("return", route$6(req, config));
+            return _context.abrupt("return", route$7(req, config));
           case 15:
-            if (!matches$7(configRoutes, req)) {
+            if (!matches$8(configRoutes, req)) {
               _context.next = 18;
               break;
             }
             info('matches signin');
-            return _context.abrupt("return", route$7(req, config));
+            return _context.abrupt("return", route$8(req, config));
           case 18:
-            if (!matches$5(configRoutes, req)) {
+            if (!matches$6(configRoutes, req)) {
               _context.next = 21;
               break;
             }
             info('matches providers');
-            return _context.abrupt("return", route$5(req, config));
+            return _context.abrupt("return", route$6(req, config));
           case 21:
-            if (!matches$4(configRoutes, req)) {
+            if (!matches$5(configRoutes, req)) {
               _context.next = 24;
               break;
             }
             info('matches csrf');
-            return _context.abrupt("return", route$4(req, config));
+            return _context.abrupt("return", route$5(req, config));
           case 24:
-            if (!matches$3(configRoutes, req)) {
+            if (!matches$4(configRoutes, req)) {
               _context.next = 27;
               break;
             }
             info('matches callback');
-            return _context.abrupt("return", route$3(req, config));
+            return _context.abrupt("return", route$4(req, config));
           case 27:
-            if (!matches$2(configRoutes, req)) {
+            if (!matches$3(configRoutes, req)) {
               _context.next = 30;
               break;
             }
             info('matches signout');
-            return _context.abrupt("return", route$2(req, config));
+            return _context.abrupt("return", route$3(req, config));
           case 30:
             warn('No POST routes matched');
             return _context.abrupt("return", new Response(null, {
@@ -3381,19 +3426,19 @@ function DELETER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 3:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 6:
             warn('No DELETE routes matched');
             return _context.abrupt("return", new Response(null, {
@@ -3421,26 +3466,26 @@ function PUTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 3:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 6:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 9:
             warn('No PUT routes matched');
             return _context.abrupt("return", new Response(null, {
@@ -3484,6 +3529,7 @@ var appRoutes = function appRoutes(prefix) {
     CALLBACK: prefix + "/auth/callback",
     SIGNOUT: prefix + "/auth/signout",
     ERROR: prefix + "/auth/error",
+    VERIFY_REQUEST: prefix + "/auth/verify-request",
     ME: prefix + "/me",
     USERS: prefix + "/users",
     TENANTS: prefix + "/tenants",