@niledatabase/server 3.0.0-alpha.40 → 3.0.0-alpha.42

package/dist/server.esm.js

@@ -1432,7 +1432,7 @@ function _request() {
   return _request.apply(this, arguments);
 }
 
-var key$9 = 'ME';
+var key$a = 'ME';
 /**
  * @swagger
  * /api/me:
@@ -1483,16 +1483,16 @@ function _GET$4() {
   }));
   return _GET$4.apply(this, arguments);
 }
-function route$c(_x4, _x5) {
-  return _route$c.apply(this, arguments);
+function route$d(_x4, _x5) {
+  return _route$d.apply(this, arguments);
 }
-function _route$c() {
-  _route$c = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(request, config) {
+function _route$d() {
+  _route$d = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(request, config) {
     var url;
     return _regeneratorRuntime().wrap(function _callee2$(_context2) {
       while (1) switch (_context2.prev = _context2.next) {
         case 0:
-          url = apiRoutes(config)[key$9];
+          url = apiRoutes(config)[key$a];
           _context2.t0 = request.method;
           _context2.next = _context2.t0 === 'GET' ? 4 : 7;
           break;
@@ -1513,10 +1513,10 @@ function _route$c() {
       }
     }, _callee2);
   }));
-  return _route$c.apply(this, arguments);
+  return _route$d.apply(this, arguments);
 }
-function matches$c(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$9]);
+function matches$d(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$a]);
 }
 
 function auth(_x, _x2) {
@@ -2065,19 +2065,19 @@ function _PUT$2() {
   return _PUT$2.apply(this, arguments);
 }
 
-var key$8 = 'USERS';
-function route$b(_x, _x2) {
-  return _route$b.apply(this, arguments);
+var key$9 = 'USERS';
+function route$c(_x, _x2) {
+  return _route$c.apply(this, arguments);
 }
-function _route$b() {
-  _route$b = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$c() {
+  _route$c = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$8 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$9 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2116,10 +2116,10 @@ function _route$b() {
       }
     }, _callee);
   }));
-  return _route$b.apply(this, arguments);
+  return _route$c.apply(this, arguments);
 }
-function matches$b(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$8]);
+function matches$c(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$9]);
 }
 
 /**
@@ -2354,19 +2354,19 @@ function _PUT$1() {
   return _PUT$1.apply(this, arguments);
 }
 
-var key$7 = 'TENANT_USERS';
-function route$a(_x, _x2) {
-  return _route$a.apply(this, arguments);
+var key$8 = 'TENANT_USERS';
+function route$b(_x, _x2) {
+  return _route$b.apply(this, arguments);
 }
-function _route$a() {
-  _route$a = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$b() {
+  _route$b = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session, yurl, _yurl$pathname$split$, tenantId;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$7 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$8 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2432,17 +2432,17 @@ function _route$a() {
       }
     }, _callee);
   }));
-  return _route$a.apply(this, arguments);
+  return _route$b.apply(this, arguments);
 }
-function matches$a(configRoutes, request) {
+function matches$b(configRoutes, request) {
   var url = new URL(request.url);
   var _url$pathname$split$r = url.pathname.split('/').reverse(),
     userId = _url$pathname$split$r[0],
     possibleTenantId = _url$pathname$split$r[1],
     tenantId = _url$pathname$split$r[2];
-  var route = configRoutes[key$7].replace('{tenantId}', tenantId).replace('{userId}', userId);
+  var route = configRoutes[key$8].replace('{tenantId}', tenantId).replace('{userId}', userId);
   if (userId === 'users') {
-    route = configRoutes[key$7].replace('{tenantId}', possibleTenantId);
+    route = configRoutes[key$8].replace('{tenantId}', possibleTenantId);
   }
   return urlMatches(request.url, route);
 }
@@ -2777,19 +2777,19 @@ function isUUID(value) {
   var regex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5|7][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
   return regex.test(value);
 }
-var key$6 = 'TENANTS';
-function route$9(_x, _x2) {
-  return _route$9.apply(this, arguments);
+var key$7 = 'TENANTS';
+function route$a(_x, _x2) {
+  return _route$a.apply(this, arguments);
 }
-function _route$9() {
-  _route$9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
+function _route$a() {
+  _route$a = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request, config) {
     var _Logger, info, session, _request$url$split$re, possibleTenantId;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$6 + "]"), info = _Logger.info;
+          }), "[ROUTES][" + key$7 + "]"), info = _Logger.info;
           _context.next = 3;
           return auth(request, config);
         case 3:
@@ -2856,10 +2856,10 @@ function _route$9() {
       }
     }, _callee);
   }));
-  return _route$9.apply(this, arguments);
+  return _route$a.apply(this, arguments);
 }
-function matches$9(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$6]);
+function matches$a(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$7]);
 }
 
 var proxyRoutes = function proxyRoutes(config) {
@@ -2871,21 +2871,22 @@ var proxyRoutes = function proxyRoutes(config) {
     CALLBACK: makeRestUrl(config, '/auth/callback'),
     SIGNOUT: makeRestUrl(config, '/auth/signout'),
     ERROR: makeRestUrl(config, '/auth/error'),
-    VERIFY_REQUEST: makeRestUrl(config, '/auth/verify-request')
+    VERIFY_REQUEST: makeRestUrl(config, '/auth/verify-request'),
+    PASSWORD_RESET: makeRestUrl(config, '/auth/reset-password')
   };
 };
 
-var key$5 = 'SIGNIN';
-function route$8(_x, _x2) {
-  return _route$8.apply(this, arguments);
+var key$6 = 'SIGNIN';
+function route$9(_x, _x2) {
+  return _route$9.apply(this, arguments);
 }
-function _route$8() {
-  _route$8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$9() {
+  _route$9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     var url, init, _URL$pathname$split$r, provider, passThroughUrl, params, res;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          url = proxyRoutes(config)[key$5];
+          url = proxyRoutes(config)[key$6];
           init = {
             method: req.method,
             headers: req.headers
@@ -2895,7 +2896,7 @@ function _route$8() {
               init.body = req.clone().body;
             }
             _URL$pathname$split$r = new URL(req.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
-            url = proxyRoutes(config)[key$5] + "/" + provider;
+            url = proxyRoutes(config)[key$6] + "/" + provider;
           }
           passThroughUrl = new URL(req.url);
           params = new URLSearchParams(passThroughUrl.search);
@@ -2913,17 +2914,17 @@ function _route$8() {
       }
     }, _callee);
   }));
-  return _route$8.apply(this, arguments);
+  return _route$9.apply(this, arguments);
 }
-function matches$8(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$5]);
+function matches$9(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$6]);
 }
 
-function route$7(_x, _x2) {
-  return _route$7.apply(this, arguments);
+function route$8(_x, _x2) {
+  return _route$8.apply(this, arguments);
 }
-function _route$7() {
-  _route$7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$8() {
+  _route$8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2937,17 +2938,17 @@ function _route$7() {
       }
     }, _callee);
   }));
-  return _route$7.apply(this, arguments);
+  return _route$8.apply(this, arguments);
 }
-function matches$7(configRoutes, request) {
+function matches$8(configRoutes, request) {
   return urlMatches(request.url, configRoutes.SESSION);
 }
 
-function route$6(_x, _x2) {
-  return _route$6.apply(this, arguments);
+function route$7(_x, _x2) {
+  return _route$7.apply(this, arguments);
 }
-function _route$6() {
-  _route$6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$7() {
+  _route$7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2961,17 +2962,17 @@ function _route$6() {
       }
     }, _callee);
   }));
-  return _route$6.apply(this, arguments);
+  return _route$7.apply(this, arguments);
 }
-function matches$6(configRoutes, request) {
+function matches$7(configRoutes, request) {
   return urlMatches(request.url, configRoutes.PROVIDERS);
 }
 
-function route$5(_x, _x2) {
-  return _route$5.apply(this, arguments);
+function route$6(_x, _x2) {
+  return _route$6.apply(this, arguments);
 }
-function _route$5() {
-  _route$5 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+function _route$6() {
+  _route$6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -2985,33 +2986,33 @@ function _route$5() {
       }
     }, _callee);
   }));
-  return _route$5.apply(this, arguments);
+  return _route$6.apply(this, arguments);
 }
-function matches$5(configRoutes, request) {
+function matches$6(configRoutes, request) {
   return urlMatches(request.url, configRoutes.CSRF);
 }
 
-var key$4 = 'CALLBACK';
-function route$4(_x, _x2) {
-  return _route$4.apply(this, arguments);
+var key$5 = 'CALLBACK';
+function route$5(_x, _x2) {
+  return _route$5.apply(this, arguments);
 }
-function _route$4() {
-  _route$4 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
+function _route$5() {
+  _route$5 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
     var _Logger, error, _URL$pathname$split$r, provider, passThroughUrl, params, url, res, location;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
           _Logger = Logger(_extends({}, config, {
             debug: config.debug
-          }), "[ROUTES][" + key$4 + "]"), error = _Logger.error;
-          _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
-          passThroughUrl = new URL(request$1.url);
+          }), "[ROUTES][" + key$5 + "]"), error = _Logger.error;
+          _URL$pathname$split$r = new URL(req.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
+          passThroughUrl = new URL(req.url);
           params = new URLSearchParams(passThroughUrl.search);
-          url = proxyRoutes(config).CALLBACK + "/" + provider + (params.toString() !== '' ? "?" + params.toString() : '');
+          url = proxyRoutes(config)[key$5] + "/" + provider + (params.toString() !== '' ? "?" + params.toString() : '');
           _context.next = 7;
           return request(url, {
-            request: request$1,
-            method: request$1.method
+            request: req,
+            method: req.method
           }, config)["catch"](function (e) {
             error('an error as occurred', e);
           });
@@ -3037,30 +3038,30 @@ function _route$4() {
       }
     }, _callee);
   }));
-  return _route$4.apply(this, arguments);
+  return _route$5.apply(this, arguments);
 }
-function matches$4(configRoutes, request) {
+function matches$5(configRoutes, request) {
   return urlMatches(request.url, configRoutes.CALLBACK);
 }
 
-var key$3 = 'SIGNOUT';
-function route$3(_x, _x2) {
-  return _route$3.apply(this, arguments);
+var key$4 = 'SIGNOUT';
+function route$4(_x, _x2) {
+  return _route$4.apply(this, arguments);
 }
-function _route$3() {
-  _route$3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
+function _route$4() {
+  _route$4 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(request$1, config) {
     var url, init, _URL$pathname$split$r, provider, res;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          url = proxyRoutes(config)[key$3];
+          url = proxyRoutes(config)[key$4];
           init = {
             method: request$1.method
           };
           if (request$1.method === 'POST') {
             init.body = request$1.body;
             _URL$pathname$split$r = new URL(request$1.url).pathname.split('/').reverse(), provider = _URL$pathname$split$r[0];
-            url = proxyRoutes(config)[key$3] + "/" + provider;
+            url = proxyRoutes(config)[key$4] + "/" + provider;
           }
           _context.next = 5;
           return request(url, _extends({}, init, {
@@ -3075,13 +3076,38 @@ function _route$3() {
       }
     }, _callee);
   }));
+  return _route$4.apply(this, arguments);
+}
+function matches$4(configRoutes, request) {
+  return urlMatches(request.url, configRoutes[key$4]);
+}
+
+var key$3 = 'ERROR';
+function route$3(_x, _x2) {
+  return _route$3.apply(this, arguments);
+}
+function _route$3() {
+  _route$3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          return _context.abrupt("return", request(proxyRoutes(config)[key$3], {
+            method: req.method,
+            request: req
+          }, config));
+        case 1:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
   return _route$3.apply(this, arguments);
 }
 function matches$3(configRoutes, request) {
   return urlMatches(request.url, configRoutes[key$3]);
 }
 
-var key$2 = 'ERROR';
+var key$2 = 'VERIFY_REQUEST';
 function route$2(_x, _x2) {
   return _route$2.apply(this, arguments);
 }
@@ -3106,20 +3132,43 @@ function matches$2(configRoutes, request) {
   return urlMatches(request.url, configRoutes[key$2]);
 }
 
-var key$1 = 'VERIFY_REQUEST';
+var key$1 = 'PASSWORD_RESET';
 function route$1(_x, _x2) {
   return _route$1.apply(this, arguments);
 }
 function _route$1() {
   _route$1 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, config) {
+    var url, _URL, searchParams, res, location;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          return _context.abrupt("return", request(proxyRoutes(config)[key$1], {
+          url = proxyRoutes(config)[key$1];
+          _URL = new URL(req.url), searchParams = _URL.searchParams;
+          if (searchParams.size > 0) {
+            url = url + "?" + searchParams.toString();
+          }
+          _context.next = 5;
+          return request(url, {
             method: req.method,
             request: req
-          }, config));
-        case 1:
+          }, config);
+        case 5:
+          res = _context.sent;
+          location = res == null ? void 0 : res.headers.get('location');
+          if (!location) {
+            _context.next = 9;
+            break;
+          }
+          return _context.abrupt("return", new Response(res == null ? void 0 : res.body, {
+            status: 302,
+            headers: res == null ? void 0 : res.headers
+          }));
+        case 9:
+          return _context.abrupt("return", new Response(res == null ? void 0 : res.body, {
+            status: res == null ? void 0 : res.status,
+            headers: res == null ? void 0 : res.headers
+          }));
+        case 10:
         case "end":
           return _context.stop();
       }
@@ -3128,7 +3177,7 @@ function _route$1() {
   return _route$1.apply(this, arguments);
 }
 function matches$1(configRoutes, request) {
-  return urlMatches(request.url, configRoutes[key$1]);
+  return urlMatches(request.url, configRoutes.PASSWORD_RESET);
 }
 
 function GETTER(configRoutes, config) {
@@ -3140,95 +3189,102 @@ function GETTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$c(configRoutes, req)) {
+            if (!matches$d(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches me');
-            return _context.abrupt("return", route$c(req, config));
+            return _context.abrupt("return", route$d(req, config));
           case 3:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 6:
-            if (!matches$b(configRoutes, req)) {
+            if (!matches$c(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$b(req, config));
+            return _context.abrupt("return", route$c(req, config));
           case 9:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 12;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 12:
-            if (!matches$7(configRoutes, req)) {
+            if (!matches$8(configRoutes, req)) {
               _context.next = 15;
               break;
             }
             info('matches session');
-            return _context.abrupt("return", route$7(req, config));
+            return _context.abrupt("return", route$8(req, config));
           case 15:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 18;
               break;
             }
             info('matches signin');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 18:
-            if (!matches$6(configRoutes, req)) {
+            if (!matches$7(configRoutes, req)) {
               _context.next = 21;
               break;
             }
             info('matches providers');
-            return _context.abrupt("return", route$6(req, config));
+            return _context.abrupt("return", route$7(req, config));
           case 21:
-            if (!matches$5(configRoutes, req)) {
+            if (!matches$6(configRoutes, req)) {
               _context.next = 24;
               break;
             }
             info('matches csrf');
-            return _context.abrupt("return", route$5(req, config));
+            return _context.abrupt("return", route$6(req, config));
           case 24:
-            if (!matches$4(configRoutes, req)) {
+            if (!matches$1(configRoutes, req)) {
               _context.next = 27;
               break;
             }
-            info('matches callback');
-            return _context.abrupt("return", route$4(req, config));
+            info('matches password reset');
+            return _context.abrupt("return", route$1(req, config));
           case 27:
-            if (!matches$3(configRoutes, req)) {
+            if (!matches$5(configRoutes, req)) {
               _context.next = 30;
               break;
             }
-            info('matches signout');
-            return _context.abrupt("return", route$3(req, config));
+            info('matches callback');
+            return _context.abrupt("return", route$5(req, config));
           case 30:
-            if (!matches$1(configRoutes, req)) {
+            if (!matches$4(configRoutes, req)) {
               _context.next = 33;
               break;
             }
-            info('matches verify-request');
-            return _context.abrupt("return", route$1(req, config));
+            info('matches signout');
+            return _context.abrupt("return", route$4(req, config));
           case 33:
             if (!matches$2(configRoutes, req)) {
               _context.next = 36;
               break;
             }
-            info('matches error');
+            info('matches verify-request');
             return _context.abrupt("return", route$2(req, config));
           case 36:
+            if (!matches$3(configRoutes, req)) {
+              _context.next = 39;
+              break;
+            }
+            info('matches error');
+            return _context.abrupt("return", route$3(req, config));
+          case 39:
             warn('No GET routes matched');
             return _context.abrupt("return", new Response(null, {
               status: 404
             }));
-          case 38:
+          case 41:
           case "end":
             return _context.stop();
         }
@@ -3372,12 +3428,12 @@ function POSTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 3:
             if (!matches(configRoutes, req)) {
               _context.next = 6;
@@ -3386,67 +3442,74 @@ function POSTER(configRoutes, config) {
             info('matches signup');
             return _context.abrupt("return", route(req, config));
           case 6:
-            if (!matches$b(configRoutes, req)) {
+            if (!matches$c(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$b(req, config));
+            return _context.abrupt("return", route$c(req, config));
           case 9:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 12;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 12:
-            if (!matches$7(configRoutes, req)) {
+            if (!matches$8(configRoutes, req)) {
               _context.next = 15;
               break;
             }
             info('matches session');
-            return _context.abrupt("return", route$7(req, config));
+            return _context.abrupt("return", route$8(req, config));
           case 15:
-            if (!matches$8(configRoutes, req)) {
+            if (!matches$9(configRoutes, req)) {
               _context.next = 18;
               break;
             }
             info('matches signin');
-            return _context.abrupt("return", route$8(req, config));
+            return _context.abrupt("return", route$9(req, config));
           case 18:
-            if (!matches$6(configRoutes, req)) {
+            if (!matches$1(configRoutes, req)) {
               _context.next = 21;
               break;
             }
-            info('matches providers');
-            return _context.abrupt("return", route$6(req, config));
+            info('matches password reset');
+            return _context.abrupt("return", route$1(req, config));
           case 21:
-            if (!matches$5(configRoutes, req)) {
+            if (!matches$7(configRoutes, req)) {
               _context.next = 24;
               break;
             }
-            info('matches csrf');
-            return _context.abrupt("return", route$5(req, config));
+            info('matches providers');
+            return _context.abrupt("return", route$7(req, config));
           case 24:
-            if (!matches$4(configRoutes, req)) {
+            if (!matches$6(configRoutes, req)) {
               _context.next = 27;
               break;
             }
-            info('matches callback');
-            return _context.abrupt("return", route$4(req, config));
+            info('matches csrf');
+            return _context.abrupt("return", route$6(req, config));
           case 27:
-            if (!matches$3(configRoutes, req)) {
+            if (!matches$5(configRoutes, req)) {
               _context.next = 30;
               break;
             }
-            info('matches signout');
-            return _context.abrupt("return", route$3(req, config));
+            info('matches callback');
+            return _context.abrupt("return", route$5(req, config));
           case 30:
+            if (!matches$4(configRoutes, req)) {
+              _context.next = 33;
+              break;
+            }
+            info('matches signout');
+            return _context.abrupt("return", route$4(req, config));
+          case 33:
             warn('No POST routes matched');
             return _context.abrupt("return", new Response(null, {
               status: 404
             }));
-          case 32:
+          case 35:
           case "end":
             return _context.stop();
         }
@@ -3468,19 +3531,19 @@ function DELETER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 3:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 6:
             warn('No DELETE routes matched');
             return _context.abrupt("return", new Response(null, {
@@ -3508,32 +3571,39 @@ function PUTER(configRoutes, config) {
       return _regeneratorRuntime().wrap(function _callee$(_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
-            if (!matches$a(configRoutes, req)) {
+            if (!matches$b(configRoutes, req)) {
               _context.next = 3;
               break;
             }
             info('matches tenant users');
-            return _context.abrupt("return", route$a(req, config));
+            return _context.abrupt("return", route$b(req, config));
           case 3:
-            if (!matches$b(configRoutes, req)) {
+            if (!matches$c(configRoutes, req)) {
               _context.next = 6;
               break;
             }
             info('matches users');
-            return _context.abrupt("return", route$b(req, config));
+            return _context.abrupt("return", route$c(req, config));
           case 6:
-            if (!matches$9(configRoutes, req)) {
+            if (!matches$a(configRoutes, req)) {
               _context.next = 9;
               break;
             }
             info('matches tenants');
-            return _context.abrupt("return", route$9(req, config));
+            return _context.abrupt("return", route$a(req, config));
           case 9:
+            if (!matches$1(configRoutes, req)) {
+              _context.next = 12;
+              break;
+            }
+            info('matches reset password');
+            return _context.abrupt("return", route$1(req, config));
+          case 12:
             warn('No PUT routes matched');
             return _context.abrupt("return", new Response(null, {
               status: 404
             }));
-          case 11:
+          case 14:
           case "end":
             return _context.stop();
         }
@@ -3572,6 +3642,7 @@ var appRoutes = function appRoutes(prefix) {
     SIGNOUT: prefix + "/auth/signout",
     ERROR: prefix + "/auth/error",
     VERIFY_REQUEST: prefix + "/auth/verify-request",
+    PASSWORD_RESET: prefix + "/auth/reset-password",
     ME: prefix + "/me",
     USERS: prefix + "/users",
     TENANTS: prefix + "/tenants",