Title
j
Jesum Yip
01/30/2023, 2:20 AMcerbos' CEL runtime doesn't support macros? i'm trying to search for a value in this array. i'm looking for a condition where "org_id" = "abc123" in that array.
"orgs": [
{
"org_id" : "xxxxxxxxxxxxxxxxxx",
"org_name" : "xxxxxxxxxxxxxxxxx"
},
{
"org_id" : "xxxxxxxxxxxxxxxxxx",
"org_name" : "xxxxxxxxxxxxxxxxx"
}
]so far i've tried
- expr: >
request.aux_data.jwt.org_info.orgs.exists_one(org_id, "abc123")cerbos compiled
Dennis (Cerbos)
01/30/2023, 2:24 AMCerbos conditions do support macros. What’s your condition expression?
hasmapfilterPlease try this:
- expr: >
request.aux_data.jwt.org_info.orgs.exists_one(t, t.org_id == "abc123")j
Jesum Yip
01/30/2023, 2:27 AMoh my god
let me try that
i can't find any good CEL tutorials /e xamples
d
Dennis (Cerbos)
01/30/2023, 2:29 AMDid you know cerbos has REPL to try CEL expressions?
j
Jesum Yip
01/30/2023, 2:29 AMno i didn't
any docs on that?
d
Dennis (Cerbos)
01/30/2023, 2:29 AMCheck the link https://docs.cerbos.dev/cerbos/latest/cli/cerbos.html#repl
j
Jesum Yip
01/30/2023, 2:34 AMvery nice
d
Dennis (Cerbos)
01/30/2023, 2:36 AMRegarding CEL examples. I think this page https://docs.cerbos.dev/cerbos/latest/policies/conditions.html is a good starting point, which hopefully is enough for most Cerbos use cases. Then there’s an official intro and the language definition but the latter is quite verbose.
Did the fix work out for you?
j
Jesum Yip
01/30/2023, 2:37 AMyes it does
thank you so much
i'll try to read up more on CEL
the language definition part is not 100% clear to me but i'll try out more experiments
d
Dennis (Cerbos)
01/30/2023, 2:37 AMYes, it is quite complicated.
I think revisiting Cerbos docs page about conditions and experimenting with REPL will do the trick.
No worries, I’m happy to help.
j
Jesum Yip
01/30/2023, 2:57 AM@Dennis (Cerbos) in a test suite, is this how i would represent the orgs structure from above?
auxData:
validJWT:
jwt:
org_info: {
default_org_id: "some value",
orgs: [
{ org_id : "abc123" },
{ org_id : "def456" }
]
}
aud: [ "my audience" ]d
Dennis (Cerbos)
01/30/2023, 3:03 AMMissing comma after the last
}Oops. This is yaml. No comma
j
Jesum Yip
01/30/2023, 3:43 AMeverything works beautifully now. 🥰
so elegant. 🙂
:gratitude-thank-you: