Test Cel

TestCEL evaluates a CEL expression against provided claims without requiring a JWT, provider, or trust. Used for expression authoring.

POST /api/v1/workload_federation/test-cel

TestCEL

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.WorkloadFederation.TestCEL(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.WorkloadFederationServiceTestCELResponse != nil {
        // handle response
    }
}

200

{
  "error": "<string>",
  "expression": "<string>",
  "matched": true
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The WorkloadFederationServiceTestCELRequest message.

claimsJson · string

The claims to evaluate against, as a JSON string. Parsed into map[string]any for CEL evaluation.

expression · string

The CEL expression to evaluate. Must return bool.

Response

200 - application/json

Successful response

The WorkloadFederationServiceTestCELResponse message.

error · string

Error message if compilation or evaluation failed.

expression · string

The expression that was evaluated (echo back).

matched · boolean

Whether the expression matched (returned true).