What steps will reproduce the problem?

Use 'on'-syntax for configure triggers of actions:

                'recovery' => [
                    'class' => \Da\User\Controller\RecoveryController::class,
                    'on ' . \Da\User\Event\ResetPasswordEvent::EVENT_AFTER_RESET => function (\Da\User\Event\ResetPasswordEvent $event) {
                        if ($event->token->user 

When creating a role, on you choosing a role to be inherited, It would be convenient if the "Allowed Permissions" block display routs available for the role

for example