badmfck-api-server 5.0.8 → 5.0.10

package/dist/apiServer/APIService.d.ts

@@ -8,6 +8,8 @@ import { IDeployerServiceOptions } from './deployment/DeployerService';
 import { IBlueGreenState, IBlueGreenStateOptions } from './deployment/BlueGreenState';
 import { ILogFilesOptions } from './monitor/LogFiles';
 export interface IMonitorUser {
+    totpSecret?: string;
+    role?: "admin" | "it" | "analytic";
     login: string;
     password: string;
 }
@@ -56,6 +58,8 @@ export interface APIServiceOptions<TInterceptor = unknown> {
     metricsDir?: string;
     blueGreenWatchMs?: number;
     logFiles?: ILogFilesOptions;
+    monitorAuthDir?: string;
+    monitorAuthFile?: string;
 }
 type InferInterceptor<T> = T extends IInterceptor<infer U> ? U : unknown;
 export declare const getDefaultOptions: <I extends IInterceptor<any> | undefined>(overrides?: Omit<Partial<APIServiceOptions<InferInterceptor<NonNullable<I>>>>, "interceptor"> & {

package/dist/apiServer/APIService.js

@@ -370,7 +370,7 @@ class APIService extends BaseService_1.BaseService {
                                     httpRequest.preproducerResult = preproducerResult;
                             }
                             catch (e) {
-                                console.error(e);
+                                (0, LogService_1.logError)(e);
                                 let details = `${e}`;
                                 let stack = undefined;
                                 if (DefaultErrors_1.ErrorUtils.isError(e)) {
@@ -426,7 +426,7 @@ class APIService extends BaseService_1.BaseService {
                             result = await i.__execute(httpRequest);
                         }
                         catch (e) {
-                            console.error(e);
+                            (0, LogService_1.logError)(e);
                             let stack = "";
                             let message = "";
                             if (e instanceof Error) {
@@ -604,7 +604,7 @@ class APIService extends BaseService_1.BaseService {
                 }
             }
             catch (e) {
-                console.error(e);
+                (0, LogService_1.logError)(e);
             }
         }
         if (req && !ignoreHttpLogging)

package/dist/apiServer/BaseEndpoint.js

@@ -240,7 +240,7 @@ class BaseEndpoint {
                 }
             }
             catch (e) {
-                console.error("Error during stream cleanup:", e);
+                (0, LogService_1.logError)("Error during stream cleanup:", e);
             }
             try {
                 if (!res.writableEnded)
@@ -291,7 +291,7 @@ class BaseEndpoint {
         });
         req.raw?.on?.("close", cleanup);
         stream.on('error', (err) => {
-            console.error("Stream error:", err);
+            (0, LogService_1.logError)("Stream error:", err);
             cleanup();
             try {
                 res.destroy?.(err);

package/dist/apiServer/LogService.d.ts

@@ -68,5 +68,8 @@ export declare class LogService extends BaseService {
     private static readonly PAN_CANDIDATE_REGEX;
     private static isLuhnValid;
     static sanitizeDeep(value: any, depth?: number): any;
+    private static readonly CARD_IIN_RE;
+    private static readonly AGGRESSIVE_PAN_MASKING;
+    private static looksLikePAN;
     static maskPAN(text: string): string;
 }

package/dist/apiServer/LogService.js

@@ -263,11 +263,11 @@ class LogService extends BaseService_1.BaseService {
         [/(Bearer|Basic|Digest)\s+[A-Za-z0-9\-._~+\/=]+/gi, "$1 <REDACTED>"],
         [/%B\d{13,19}\^[^?]{2,50}\^\d{4,}[^?]*\?/g, "<REDACTED TRACK1>"],
         [/;\d{13,19}=\d{4,}[^?]*\?/g, "<REDACTED TRACK2>"],
-        [/("(?:password|passwd|pwd|secret|api[_-]?key|api[_-]?secret|client[_-]?secret|access[_-]?key|private[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|token|authorization|cookie|set[_-]?cookie|session[_-]?id|sess[_-]?id|sid|cvv2?|cvc2?|cvn|cav2?|cid|security[_-]?code|card[_-]?verification[_-]?(?:value|code)?|pin|pin[_-]?block|encrypted[_-]?pin|iso[_-]?9564|exp|expiry|expiration|expiration[_-]?date|exp[_-]?date|exp[_-]?month|exp[_-]?year|cardholder[_-]?name|holder[_-]?name|card[_-]?holder)"\s*:\s*)"[^"]*"/gi, '$1"<REDACTED>"'],
-        [/("(?:cvv2?|cvc2?|pin|exp[_-]?month|exp[_-]?year|service[_-]?code)"\s*:\s*)(-?\d+)/gi, '$1"<REDACTED>"'],
+        [/("(?:password|passwd|pwd|secret|api[_-]?key|api[_-]?secret|client[_-]?secret|access[_-]?key|private[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|token|authorization|cookie|set[_-]?cookie|session[_-]?id|sess[_-]?id|sid|cvv2?|cvc2?|cvn|cav2?|cid|security[_-]?code|card[_-]?verification[_-]?(?:value|code)?|pin|pin[_-]?block|encrypted[_-]?pin|iso[_-]?9564|exp|expiry|expiration|expiration[_-]?date|exp[_-]?date|exp[_-]?month|exp[_-]?year|cardholder[_-]?name|holder[_-]?name|card[_-]?holder|pan|dpan|primary[_-]?account[_-]?number|application[_-]?primary[_-]?account[_-]?number|card[_-]?number|card[_-]?no|account[_-]?number|application[_-]?expiration[_-]?date|online[_-]?payment[_-]?cryptogram|cryptogram|emv[_-]?data|track[12]?[_-]?data)"\s*:\s*)"[^"]*"/gi, '$1"<REDACTED>"'],
+        [/("(?:cvv2?|cvc2?|pin|exp[_-]?month|exp[_-]?year|service[_-]?code|pan|dpan|primary[_-]?account[_-]?number|application[_-]?primary[_-]?account[_-]?number|card[_-]?number|account[_-]?number)"\s*:\s*)(-?\d+)/gi, '$1"<REDACTED>"'],
         [/([?&;](?:password|passwd|pwd|secret|token|access[_-]?token|refresh[_-]?token|id[_-]?token|api[_-]?key|apikey|auth|authorization|session|session[_-]?id|sid|cvv2?|cvc2?|pin|pan|signature|sig)=)[^&\s"'<>;]*/gi, "$1<REDACTED>"],
     ];
-    static SENSITIVE_KEY_RE = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|apikey|password|passwd|pwd|secret|client[_-]?secret|access[_-]?key|private[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|token|session[_-]?id|sess[_-]?id|sid|cvv2?|cvc2?|cvn|cav2?|security[_-]?code|card[_-]?verification[_-]?(?:value|code)?|pin|pin[_-]?block|pan|card[_-]?number|exp|expiry|expiration|exp[_-]?date|exp[_-]?month|exp[_-]?year|cardholder[_-]?name|holder[_-]?name|card[_-]?holder)$/i;
+    static SENSITIVE_KEY_RE = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|apikey|password|passwd|pwd|secret|client[_-]?secret|access[_-]?key|private[_-]?key|access[_-]?token|refresh[_-]?token|id[_-]?token|token|session[_-]?id|sess[_-]?id|sid|cvv2?|cvc2?|cvn|cav2?|security[_-]?code|card[_-]?verification[_-]?(?:value|code)?|pin|pin[_-]?block|pan|card[_-]?number|exp|expiry|expiration|exp[_-]?date|exp[_-]?month|exp[_-]?year|cardholder[_-]?name|holder[_-]?name|card[_-]?holder|pan|dpan|primary[_-]?account[_-]?number|application[_-]?primary[_-]?account[_-]?number|card[_-]?number|card[_-]?no|account[_-]?number|application[_-]?expiration[_-]?date|online[_-]?payment[_-]?cryptogram|cryptogram|emv[_-]?data|track[12]?[_-]?data)$/i;
     static sanitize(text) {
         if (!text || text.length < 3)
             return text;
@@ -338,12 +338,23 @@ class LogService extends BaseService_1.BaseService {
         }
         return String(value);
     }
+    static CARD_IIN_RE = /^(?:4|5[1-5]|2[2-7]|3[47]|35|6011|64[4-9]|65|62|3(?:0[0-5]|[68]))/;
+    static AGGRESSIVE_PAN_MASKING = true;
+    static looksLikePAN(digits) {
+        if (digits.length < 13 || digits.length > 19)
+            return false;
+        if (LogService.isLuhnValid(digits))
+            return true;
+        return LogService.AGGRESSIVE_PAN_MASKING && LogService.CARD_IIN_RE.test(digits);
+    }
     static maskPAN(text) {
         if (!text || text.length < 13)
             return text;
         return text.replace(LogService.PAN_CANDIDATE_REGEX, (match) => {
             const digits = match.replace(/\D/g, "");
-            return LogService.isLuhnValid(digits) ? "xxxx...xxxx" : match;
+            if (!LogService.looksLikePAN(digits))
+                return match;
+            return "xxxx...xxxx" + digits.slice(-4);
         });
     }
 }

package/dist/apiServer/MysqlService.js

@@ -101,14 +101,14 @@ class MysqlService extends BaseService_1.BaseService {
             }
             this.transactions = this.transactions.filter(i => !removedIDs.includes(i.id));
             if (this.debug && count - this.transactions.length > 0)
-                console.log("Removed: ", count - this.transactions.length);
+                (0, LogService_1.logInfo)("Removed: ", count - this.transactions.length);
             if (Date.now() - this.lastSuccessQueryTime > this.pingInterval) {
                 if (!this.pool)
                     return;
                 for (let i = 0; i < this.options.connectionLimit; i++) {
                     exports.DEPRECATED_REQ_MYSQL_QUERY.request({ query: "SELECT 1 @NOLIMIT", fields: [] });
                     if (this.debug)
-                        console.log("Ping mysql on each connection in pool");
+                        (0, LogService_1.logInfo)("Ping mysql on each connection in pool");
                 }
             }
         }, 1000 * 30);
@@ -162,14 +162,14 @@ class MysqlService extends BaseService_1.BaseService {
                 promises.push(this.execute(query, i.rollbackQuery ?? null, i.transactionID ?? 0, i.throwable ?? false, i.calculateCount ?? false));
             }
             if (this.debug) {
-                console.log("Execute queries: ", data.length);
+                (0, LogService_1.logInfo)("Execute queries: ", data.length);
                 for (let i of data)
-                    console.log(i);
+                    (0, LogService_1.logInfo)(i);
             }
             const result = await Promise.all(promises);
             for (let i of result) {
                 if (i.error && i.error.code === "CONN_ERR") {
-                    console.error("Connection error, was destroyed, recreate pool");
+                    (0, LogService_1.logError)("Connection error, was destroyed, recreate pool");
                     await this.recreatePool();
                 }
                 if (i.error && (i.error.fatal || i.error.throwable))
@@ -191,11 +191,11 @@ class MysqlService extends BaseService_1.BaseService {
             }
             const tid = MysqlService.nextTransactionID++;
             if (this.debug)
-                console.log("Begin transaction with id ", tid);
+                (0, LogService_1.logInfo)("Begin transaction with id ", tid);
             try {
                 await conn.query("START TRANSACTION");
                 if (this.debug)
-                    console.log("Transaction started");
+                    (0, LogService_1.logInfo)("Transaction started");
             }
             catch (e) {
                 this.rollbackTransaction({ id: tid, conn: conn, timestamp: Date.now(), queries: [{ sql: "START TRANSACTION", status: "error" }] });
@@ -208,7 +208,7 @@ class MysqlService extends BaseService_1.BaseService {
                 queries: []
             });
             if (this.debug)
-                console.log("Transactions pool: ", this.transactions);
+                (0, LogService_1.logInfo)("Transactions pool: ", this.transactions);
             return tid;
         };
         exports.DEPRECATED_REQ_MYSQL_TQUERY.listener = async (data) => {
@@ -226,7 +226,7 @@ class MysqlService extends BaseService_1.BaseService {
             let err = null;
             let sqlData = null;
             if (this.debug)
-                console.log("Execute query on transaction: ", trx.id);
+                (0, LogService_1.logInfo)("Execute query on transaction: ", trx.id);
             try {
                 sqlData = await trx.conn.query(query);
             }
@@ -251,7 +251,7 @@ class MysqlService extends BaseService_1.BaseService {
                 }
             }
             if (this.debug)
-                console.log("Query execution status:", err ? err.message : "completed");
+                (0, LogService_1.logInfo)("Query execution status:", err ? err.message : "completed");
             trx.queries.push({ sql: query, status: err ? err.message : "completed" });
             return {
                 data: sqlData ? sqlData[0] : null,
@@ -289,10 +289,10 @@ class MysqlService extends BaseService_1.BaseService {
                 };
             }
             if (this.debug)
-                console.log("Commit transaction:", trx.id);
+                (0, LogService_1.logInfo)("Commit transaction:", trx.id);
             this.transactions = this.transactions.filter(i => i.id !== tid);
             if (this.debug)
-                console.log("Transaction pool:", this.transactions);
+                (0, LogService_1.logInfo)("Transaction pool:", this.transactions);
             const err = await this.commit(trx);
             return err;
         };
@@ -312,7 +312,7 @@ class MysqlService extends BaseService_1.BaseService {
     async rollbackTransaction(trx, donNotRemove) {
         let err = null;
         try {
-            console.log("Rollback started", trx.conn.threadId);
+            (0, LogService_1.logInfo)("Rollback started", trx.conn.threadId);
             await trx.conn.rollback();
             await trx.conn.commit();
             trx.conn.removeAllListeners();
@@ -320,7 +320,7 @@ class MysqlService extends BaseService_1.BaseService {
             if (!donNotRemove)
                 this.transactions = this.transactions.filter(i => i.id !== trx.id);
             if (this.debug)
-                console.log("Rollback complete", trx.conn.threadId);
+                (0, LogService_1.logInfo)("Rollback complete", trx.conn.threadId);
         }
         catch (e) {
             (0, LogService_1.logCrit)("${MysqlService.js}", "Can't rollback transaction", trx.queries);
@@ -330,7 +330,7 @@ class MysqlService extends BaseService_1.BaseService {
         return err;
     }
     async finishApp() {
-        console.log("Finishing mysql service");
+        (0, LogService_1.logInfo)("Finishing mysql service");
         for (let i of this.transactions)
             this.rollbackTransaction(i);
         if (this.pool) {
@@ -375,7 +375,7 @@ class MysqlService extends BaseService_1.BaseService {
                 this.failReportFileStreamName = file;
             }
             if (this.debug)
-                console.log("Store transaction fail report: ", file, trx.queries, message);
+                (0, LogService_1.logInfo)("Store transaction fail report: ", file, trx.queries, message);
             if (!this.failReportFileStream)
                 this.failReportFileStream = fs_1.default.createWriteStream(file, { flags: 'a' });
             this.failReportFileStream.write(JSON.stringify({ queries: trx.queries, time: trx.timestamp, date, message }) + "\n}EOB{\n", err => {
@@ -437,7 +437,7 @@ class MysqlService extends BaseService_1.BaseService {
                 (0, LogService_1.logInfo)("${MysqlService.js}", "MYSQL CONNECTION ENQUEUED");
         });
         if (this.debug)
-            console.log("Check mysql connection");
+            (0, LogService_1.logInfo)("Check mysql connection");
         return new Promise(async (resolve, reject) => {
             try {
                 const conn = await this.pool?.getConnection();
@@ -610,13 +610,13 @@ class MysqlService extends BaseService_1.BaseService {
                 if (transactionID && transactionID > 0) {
                     conn = this.transactions.find(i => i.id === transactionID)?.conn ?? null;
                     if (this.debug)
-                        console.log("Execute query on transaction: ", conn?.threadId);
+                        (0, LogService_1.logInfo)("Execute query on transaction: ", conn?.threadId);
                 }
                 else {
                     conn = await this.pool.getConnection();
                 }
                 if (this.debug)
-                    console.log("Execute query", conn?.threadId);
+                    (0, LogService_1.logInfo)("Execute query", conn?.threadId);
                 if (!conn) {
                     (0, LogService_1.logCrit)("${MysqlService.js}", `No connection created!`);
                     resolve({

package/dist/apiServer/TimeframeService.js

@@ -62,7 +62,7 @@ class TimeframeService extends BaseService_1.BaseService {
             });
         };
         this.intervalId = setInterval(() => {
-            this.loop().catch(console.error);
+            this.loop().catch(e => (0, LogService_1.logError)("Timeframe loop failed:", e));
         }, this.TICK_INTERVAL_MS);
     }
     async loop() {
@@ -109,10 +109,10 @@ class TimeframeService extends BaseService_1.BaseService {
             exports.S_TIMEFRAME_TASK_EXECUTED.invoke(task);
         }
         catch (e) {
-            console.error(`Task ${task.name} error:`, e);
+            (0, LogService_1.logError)(`Task ${task.name} error:`, e);
             task.retries = (task.retries || 0) + 1;
             if (task.retries > (task.maxRetries ?? 0)) {
-                console.warn(`Task ${task.name} failed too many times. Dropping.`);
+                (0, LogService_1.logWarn)(`Task ${task.name} failed too many times. Dropping.`);
                 this.tasks = this.tasks.filter(t => t !== task);
             }
             else {

package/dist/apiServer/db/MysqlAdapter.js

@@ -702,7 +702,7 @@ class MysqlAdapter {
                     value = JSON.stringify(value);
                 }
                 catch (e) {
-                    console.error("Can't prepare JSON object", e);
+                    (0, LogService_1.logError)("Can't prepare JSON object", e);
                     value = "{}";
                 }
             }

package/dist/apiServer/deployment/DeployerService.js

@@ -222,7 +222,7 @@ class DeployerService extends BaseService_1.BaseService {
                 throw result;
             }
             if (found.backup) {
-                console.log("TODO: backup");
+                (0, LogService_1.logInfo)("TODO: backup");
             }
             if (found.unpack) {
                 const unpackResult = await this.unpack(found.destination, uploadPath, found.install, found.ignoreDirectoryClean);
@@ -237,7 +237,7 @@ class DeployerService extends BaseService_1.BaseService {
             }
             if (found.chmod && found.chmod > 1) {
                 try {
-                    console.log("Try to execute: ", `chmod -R ${found.chmod} ${found.destination}`);
+                    (0, LogService_1.logInfo)("Try to execute: ", `chmod -R ${found.chmod} ${found.destination}`);
                     (0, child_process_1.execFileSync)("chmod", ["-R", String(found.chmod), found.destination]);
                 }
                 catch (e) {
@@ -662,7 +662,7 @@ class DeployerService extends BaseService_1.BaseService {
         }
         let hash2 = crypto_1.default.createHash("md5").update(content).digest("hex");
         if (hash !== hash2) {
-            console.log("Values was changed in " + filePath);
+            (0, LogService_1.logInfo)("Values was changed in " + filePath);
             fs_1.default.writeFileSync(filePath, content, "utf-8");
         }
         const leftover = content.match(/_\{\{[A-Za-z0-9_]+\}\}_/g);
@@ -727,7 +727,7 @@ class DeployerService extends BaseService_1.BaseService {
                     (0, child_process_1.execFileSync)("npm", ["--prefix", tmpDir, npmCmd, "--ignore-scripts"]);
                 }
                 catch (e) {
-                    console.error(e);
+                    (0, LogService_1.logError)(e);
                     (0, LogService_1.logError)(e);
                     resolve({ code: 17, message: "Can't install", httpStatus: 500 });
                     return;

package/dist/apiServer/deployment/Notifier.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Notifier = void 0;
+const LogService_1 = require("../LogService");
 const crypto_1 = require("crypto");
 const BaseService_1 = require("../BaseService");
 const __1 = require("../..");
@@ -33,7 +34,7 @@ class Notifier extends BaseService_1.BaseService {
             });
         }
         catch (e) {
-            console.error(e);
+            (0, LogService_1.logError)(e);
         }
     }
     async notifySMSStatus(phone, text, user) {
@@ -52,7 +53,7 @@ class Notifier extends BaseService_1.BaseService {
             });
         }
         catch (e) {
-            console.error(e);
+            (0, LogService_1.logError)(e);
         }
     }
 }

package/dist/apiServer/external/ExternalService.js

@@ -37,6 +37,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExternalService = exports.REQ_XT = exports.REQ_EXTERNAL_CALL = void 0;
+const LogService_1 = require("../LogService");
 const badmfck_signal_1 = require("badmfck-signal");
 const BaseService_1 = require("../BaseService");
 const DefaultErrors_1 = __importStar(require("../structures/DefaultErrors"));
@@ -48,7 +49,7 @@ exports.REQ_EXTERNAL_CALL = new badmfck_signal_1.Req(undefined, "REQ_EXTERNAL_CA
 exports.REQ_XT = new badmfck_signal_1.Req(undefined, "REQ_XT");
 exports.REQ_XT.listener = async ({ id, req }) => {
     if (ExternalService.allInstances.length === 0) {
-        console.error("ExternalService.allInstances.length === 0");
+        (0, LogService_1.logError)("ExternalService.allInstances.length === 0");
         return { error: { ...DefaultErrors_1.default.BAD_REQUEST, details: "no external services" } };
     }
     for (let i of ExternalService.allInstances) {
@@ -59,7 +60,7 @@ exports.REQ_XT.listener = async ({ id, req }) => {
 };
 exports.REQ_EXTERNAL_CALL.listener = async ({ id, requestName, requestData }) => {
     if (ExternalService.allInstances.length === 0) {
-        console.error("ExternalService.allInstances.length === 0");
+        (0, LogService_1.logError)("ExternalService.allInstances.length === 0");
         return { ...DefaultErrors_1.default.BAD_REQUEST, details: "no external service found: " + id + ", requestName:" + requestName, stack: [requestData] };
     }
     for (let i of ExternalService.allInstances) {

package/dist/apiServer/external/MicroserviceClient.js

@@ -37,6 +37,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MicroserviceClient = exports.REQ_MICROSERVICE_CALL = void 0;
+const LogService_1 = require("../LogService");
 const badmfck_signal_1 = require("badmfck-signal");
 const BaseService_1 = require("../BaseService");
 const DefaultErrors_1 = __importStar(require("../structures/DefaultErrors"));
@@ -96,14 +97,14 @@ class MicroserviceClient extends BaseService_1.BaseService {
             }, { headers });
             if (!resp.ok && resp.details?.network) {
                 if (attempt < maxAttempts) {
-                    console.log(`Retrying microservice call... (attempt ${attempt}/${maxAttempts})`);
+                    (0, LogService_1.logInfo)(`Retrying microservice call... (attempt ${attempt}/${maxAttempts})`);
                     await TimeframeService_1.TimeframeService.wait(attemptTimeout * attempt);
                     continue;
                 }
                 return { ...DefaultErrors_1.default.EXTERNAL_SERVICE_ERROR, stack: [this.options.host, req], details: "Network connection lost after multiple retries, attempts: " + attempt };
             }
             if (!resp.ok) {
-                console.log(`Microservice call error response:`, resp);
+                (0, LogService_1.logInfo)(`Microservice call error response:`, resp);
                 const remoteError = resp.error?.error;
                 if (DefaultErrors_1.ErrorUtils.isError(remoteError))
                     return remoteError;

package/dist/apiServer/monitor/Monitor.d.ts

@@ -2,6 +2,7 @@ import { Signal } from "badmfck-signal";
 import { APIServiceOptions } from "../APIService";
 import { BaseEndpoint } from "../BaseEndpoint";
 import { HTTPRequestVO, TransferPacketVO } from "../structures/Interfaces";
+import { TMonitorCapability } from "./MonitorAuth";
 export interface IUserAction {
     action: string;
 }
@@ -30,6 +31,9 @@ export declare class Monitor extends BaseEndpoint {
     sysinfo(req: HTTPRequestVO): Promise<TransferPacketVO>;
     procinfo(req: HTTPRequestVO): Promise<TransferPacketVO>;
     fdreport(req: HTTPRequestVO): Promise<TransferPacketVO>;
+    login(req: HTTPRequestVO): Promise<TransferPacketVO>;
+    enroll2fa(req: HTTPRequestVO): Promise<TransferPacketVO>;
+    logout(req: HTTPRequestVO): Promise<TransferPacketVO>;
     restart(req: HTTPRequestVO): Promise<TransferPacketVO>;
     httpstats(req: HTTPRequestVO): Promise<TransferPacketVO>;
     inventory(req: HTTPRequestVO): Promise<TransferPacketVO>;
@@ -40,5 +44,6 @@ export declare class Monitor extends BaseEndpoint {
     metricsWeek(req: HTTPRequestVO): Promise<TransferPacketVO>;
     connections(req: HTTPRequestVO): Promise<TransferPacketVO>;
     db(req: HTTPRequestVO): Promise<TransferPacketVO>;
+    requireAccess(req: HTTPRequestVO, capability: TMonitorCapability): Promise<string>;
     checkAuthentication(req: HTTPRequestVO): Promise<string>;
 }