Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

cerbos' CEL runtime doesn't support macros? i'm trying to search for a value in this array. i'm looking for a condition where "org_id" = "abc123" in that array.

```    "orgs": [	
		{
			"org_id" : "xxxxxxxxxxxxxxxxxx",
			"org_name" : "xxxxxxxxxxxxxxxxx"
		},
		{
			"org_id" : "xxxxxxxxxxxxxxxxxx",
			"org_name" : "xxxxxxxxxxxxxxxxx"
		}
	]```

so far i've tried

```- expr: &gt; 
    request.aux_data.jwt.org_info.orgs.exists_one(org_id, "abc123")```
and `cerbos compile` throws an error

Cerbos conditions do support macros. `has`, `map`, `filter` and alike are all macros. Which API are you using? ~What’s your condition expression?~

Please try this:
```- expr: &gt; 
    request.aux_data.jwt.org_info.orgs.exists_one(t, t.org_id == "abc123")```


i can't find any good CEL tutorials /e xamples

Did you know cerbos has <https://docs.cerbos.dev/cerbos/latest/cli/cerbos.html#repl|REPL> to try CEL expressions?

Check the link <https://docs.cerbos.dev/cerbos/latest/cli/cerbos.html#repl>

Regarding CEL examples. I think this page <https://docs.cerbos.dev/cerbos/latest/policies/conditions.html> is a good starting point, which hopefully is enough for most Cerbos use cases. Then there’s an <https://github.com/google/cel-spec/blob/master/doc/intro.md|official intro> and the <https://github.com/google/cel-spec/blob/master/doc/langdef.md#language-definition|language definition> but the latter is quite verbose.

the language definition part is not 100% clear to me but i'll try out more experiments

I think revisiting  Cerbos docs page about conditions and experimenting with REPL will do the trick.

<@U02D2JSV745> in a test suite, is this how i would represent the orgs structure from above?

```auxData:
    validJWT:
      jwt:
        org_info: { 
            default_org_id: "some value",
            orgs: [ 
                { org_id : "abc123" }, 
                { org_id : "def456" }
            ]
        } 
        aud: [ "my audience" ]```

Missing comma after the last `}`. Otherwise looks good

everything works beautifully now. :smiling_face_with_3_hearts: