GetAWSAssumedRole gets AWS assumed role from a request.

GetSessionContext retrieves the session context from a request.

IsReservedHeader returns true if the provided header is one of headers injected by Teleport.

MakeAppMetadata returns common server metadata for database session.

MakeAWSRequestMetadata is a helper to build AWSRequestMetadata from the provided request and endpoint.

NewAudit returns a new instance of the audit events emitter.

NewHeaderRewriter will create a new header rewriter with a number of delegates.

SetTeleportAPIErrorHeader saves the provided error in X-Teleport-API-Error header of response.

WithAWSAssumedRole adds AWS assumed role to the context of the provided request.

WithSessionContext adds session context to provided request.

TeleportAPIErrorHeader is Teleport-specific error header, optionally holding background error information.

TeleportAPIInfoHeader is Teleport-specific info header, optionally holding background information.

TeleportAWSAssumedRole indicates that the incoming requests are signed with real AWS credentials of the specified assumed role by the AWS client.

TeleportAWSAssumedRoleAuthorization contains the original authorization header for requests signed by assumed roles.

XForwardedSSL is a non-standard X-Forwarded-* header that is set to "on" or "off" depending on whether SSL is enabled.

ReservedHeaders is a list of headers injected by Teleport.

AuditConfig is the audit events emitter configuration.

HeaderRewriter delegates to rewriters and then appends its own headers.

SessionContext contains common context parameters for an App session.

Audit defines an interface for app access audit events logger.