It is possible to type ("convert from string to specific type") the result of an expansion.

This is done by adding a type directive to the expansion expression:

"@type:${path.to.property}"

The following types are currently supported

• string (default)

• number

• int

• long

• float

• double

• boolean (alias: bool)

• json

The primary use of typed expansion is when adding the result of an expansion (always a string) to a scope (session for example) where it is to be consumed by a component that requires a specific type. If the consumer is type agnostic, typed expansion is not necessary. In this case the consumer will handle the typing.

If an invalid type directive is specified, type will default to string (just like regular expansion).

Examples

"@number:${scope.path.to.value}"  // "99" -> 99
"@int:${scope.path.to.value}"     // "99" -> 99
"@long:${scope.path.to.value}"    // "99" -> 99L
"@float:${scope.path.to.value}"   // "56.78" -> 56.78F
"@double:${scope.path.to.value}"  // "56.78" -> 56.78
"@boolean:${scope.path.to.value}" // "true" -> true
"@bool:${scope.path.to.value}"    // "false" -> false
"@json:${scope.path.to.value}"    // "{}" -> {}

The Integrity platform has two types of expressions that can be used in configuration: expansions and predicates.

Expansions are expressions that contain a dot-separated path to a value and the expression itself will be replaced with the value. Expansions always result in string values and can be combined with static strings and other expressions to form the result.

Values exist in different scopes (first element of path) and different scopes are available in different situations depending on the context.

Expansion can be performed during startup (expansion of configuration values) or in runtime (expansion of data).

Expansion expressions has the following syntax: ${path.to.value}

// Configuration property with static value and expansion
"property": "Value with expansion: ${scope.expansion.value}"

Predicates are boolean javascript expressions that must return either true or false. Predicates are used for controlling execution and for filtering and are always evaluated during runtime.

// Predicate that is always true
"always_true": "true"

// Predicate comparing a scope value with a static string value
"include": "scope.value === 'expected value'"

Expansions and predicates operate on the same data structures but since they are evaluated in different environments, they will use slightly different syntax.

Expansion is basically a template rendering. The string containing one or more expressions and static values is the template and result is the rendered template.

Predicates are javascript expressions evaluated at runtime and must be valid javascript.

The biggest difference between expansions and predicates are when and how values are converted to strings. Since the goal of expansion is to produce a string, the template engine will treat all types but lists and maps as strings and if they aren’t they will be converted. In javascript all values are treated by type (object, string, array, number, etc).

Sections

Expansion expressions can not contain logic (if/else/etc), but it is possible to iterate lists and include/exclude content based on specific conditions. This is enabled by using sections.

A section MUST:

• start with tag {{#<name>}}

• end with tag {{/<name>}}

• reference a property by (path and) name

A section MAY:

• contain expansion expressions (${...})

• static text

Sections behave different depending on the type of the referenced property:

• If the property doesn't exist, has no value or is false nothing will be rendered

• If the property is a list (multi-value) the content of the section will be rendered for each element in the list

• Otherwise section content will be rendered once

When a section is rendered the current property value is referenced using '.' (${.} / {{.}} / {{{.}}}) and properties on the current property value (if it's an object) are referenced using the property name like in regular expansion (${name}). Properties are first searched for at the current property and if not found in top level scopes.

It is also possible to invert a section, making it render when a property doesn't exist, a list is empty or a value is false. To invert, section MUST start with tag {{^name}}.

Examples

Render a simple list

Given the following list of strings:

this expression:

will render (note the trailing comma):

To remove the trailing comma, we can embed an inverted section using the @last property on the current list item (only rendered when element is not "last" in list):

This will render:

Render an object

Given the following object:

this expression:

will render:

Extension for asserting IPv4 addresses

isInSubnet

Returns true is the supplied IP belongs to the supplied subnet in CIDR notation.

Use this function to assert that a client belongs to a specific network.

IP-addresses should be octets in dotted-string format: '192.168.30.5'

Subnets are specified using CIDR notation containing an ip and the length of the subnet mask: '10.1.1.0/24'

Syntax

ipv4.isInSubnet(ip, subnet)

Arguments

Example

ipv4.isInSubnet('127.0.0.1', '127.0.0.0/8') // true

ipv4.isInSubnet('192.168.10.25', '192.168.10.0/24') // true
ipv4.isInSubnet('192.168.10.25', '192.168.0.0/16') // true

ipv4.isInSubnet('192.168.10.25', '10.0.1.0/24') // false
ipv4.isInSubnet('192.168.10.25', '192.168.11.0/24') // false

Script extension for multi value validation and comparison.

All functions operating on multi values will convert supplied value(s) to multi value if not already (see mv.from(value))

In JavaScript multi values are represented as arrays.

mv.from

Converts a value to a multi value if not already.

Handles the following types of input values:

• arrays (returned as is)

• json arrays (parsed to array)

• single values of any types (added as first element to new array)

Syntax

mv.from(value)

Arguments

Example(s)

// Create multi value from single value string
mv.from('elem') // -> ['elem']

// Create multi value from json array
mv.from('["elem01", "elem02"]') // -> ['elem01', 'elem02']

mv.length

Returns the length of the supplied multi value.

Syntax

mv.length(value)

Arguments

Example(s)

// Get multi value length of single value string
mv.length('elem') // -> 1

// Get multi value length of an array
mv.length(['elem01', 'elem02', 'elem03']) // -> 3

// Get multi value length of an json array
mv.length('["elem01", "elem02"]') // -> 2

mv.contains

Returns true if the supplied multi value contains the supplied expected value, possibly ignoring the case (if values are strings).

Note: This function works exactly like mv.containsAny but with support for only one expected value.

Syntax

mv.contains(value, expected[, ignoreCase])

Arguments

Example(s)

mv.contains(['elem01', 'elem02', 'elem03'], 'elem02') // true
mv.contains(['elem01', 'elem02', 'elem03'], 'elem04') // false
mv.contains(['elem01', 'elem02', 'elem03'], 'ELEM02', true) // true

mv.contains([7, 99, 845], 'unknown') // false
mv.contains([7, 99, 845], 7) // true

mv.containsAny

Returns true if the supplied multi value contains at least one of the supplied expected values, possibly ignoring the case (if values are strings).

Syntax

mv.containsAny(value, expected[, expected, ...][, ignoreCase])

Arguments

Example(s)

mv.containsAny(['elem01', 'elem02', 'elem03'], 'elem02') // true
mv.containsAny(['elem01', 'elem02', 'elem03'], 'elem04') // false
mv.containsAny(['elem01', 'elem02', 'elem03'], 'elem04', 'elem02') // true

mv.containsAll

Returns true if the supplied multi value contains all of the supplied expected values, possibly ignoring the case (if values are strings).

Syntax

mv.containsAll(value, expected[, expected, ...][, ignoreCase])

Arguments

Example(s)

mv.containsAll(['elem01', 'elem02', 'elem03'], 'elem02') // true
mv.containsAll(['elem01', 'elem02', 'elem03'], 'elem04') // false
mv.containsAll(['elem01', 'elem02', 'elem03'], 'elem04', 'elem02') // false
mv.containsAll(['elem01', 'elem02', 'elem03'], 'elem01', 'elem02') // true

mv.matchAny

Returns true if at least one value in the supplied multi value matches one or more of the supplied regex's.

Regex may be supplied as strings, regex-literals or RegExp objects.

Note: Case-insensitivity is controlled by regex flag ('i').

Syntax

mv.matchAny(value, regex [,regex, ...])

Arguments

Example(s)

mv.matchAny(['elem01', 'elem02', 'elem03'], 'elem02', 'elem04') // true
mv.matchAny(['elem01', 'elem02', 'elem03'], /elem02/, /elem04/) // true
mv.matchAny(['elem01', 'elem02', 'elem03'], 'ELEM02') // false
mv.matchAny(['elem01', 'elem02', 'elem03'], /ELEM02/i) // true
mv.matchAny(['elem01', 'elem02', 'elem03'], /^elem[0-9]{,2}$/) // true

mv.equals

Returns true if the supplied multi values has exactly same content.

Syntax

mv.equals(mv1, mv2)

Arguments

Example(s)

mv.equals(['elem01'], ['elem01']) // true
mv.equals(['elem01'], ['elem02']) // false

mv.equals(['elem01', 'elem02'], ['elem01', 'elem02']) // true

mv.equals(['elem01', 'elem02'], ['elem01']) // false
mv.equals(['elem01', 'elem02'], ['elem02', 'elem01']) // false

mv.isEmpty

Returns true if the supplied multi value is not null/undefined and is empty.

Syntax

mv.isEmpty(value)

Arguments

Example(s)

mv.isEmpty([]) // true

mv.isEmpty(['elem01']) // false
mv.isEmpty(null) // false

mv.isNotEmpty

Returns true if the supplied multi value is not null/undefined and is not empty (has one or more elements).

Syntax

mv.isNotEmpty(value)

Arguments

Example(s)

mv.isNotEmpty(['elem01']) // true

mv.isNotEmpty([]) // false
mv.isNotEmpty(null) // false

mv.isNullOrEmpty

Returns true if the supplied multi value is null/undefined or is empty.

Syntax

mv.isNullOrEmpty(value)

Arguments

Example(s)

mv.isNullOrEmpty([]) // true
mv.isNullOrEmpty(null) // true

mv.isNullOrEmpty(['elem01']) // false

mv.isNotNullOrEmpty

Returns true if the supplied multi value is not null/undefined and is not empty (has one or more element).

Syntax

mv.isNotNullOrEmpty(value)

Arguments

Example(s)

mv.isNotNullOrEmpty(['elem01']) // true

mv.isNotNullOrEmpty(null) // false
mv.isNotNullOrEmpty([]) // false

Introduction

Property expansion is the process of replacing a value, or a part of a value, with the result of an expression.

The actual expression is a tag containing a (dot-separated) path to a named property.

Expansion expressions are written in the following format:

"${path.to.property}"

Syntax

An expansion expression MUST:

• be in string format ("...")

• start with ${

• end with }

• contain only a (dot-separated) path to a property located in an available scope (depends on context).

{
    "property": "${path.to.property}",
}

Expansion expression MAY:

• be embedded in a string

• be combined

{
    "embedded": "Embedded: ${path.to.property}",
    "combined": "test-${path.to.first}-${path.to.second}"
}

If an expansion expression path contains an array, elements are referenced using an index property (zero based, first element has index 0):

"${path.to.array.2}" // Third element of array 'array'

Scopes

Scopes are the named top level objects containing expansion data (for example request or session). Available scopes depends on the context.

Data in scopes are accessed different depending on the type of objects included in the path. An expansion path can contain the following types of objects:

• primitive types (string, number, etc)

• objects

• arrays

A primitive type is always a leaf (last element of an expansion path) and can only contain a value, not other primitives, object or arrays.

// Expand primitive 'value' in scope 'scope'
${scope.value}

Objects can contain other objects, primitives and arrays. When objects are nested, we traverse them using a dot-separated path containing the

// Expand property 'prop' on object 'obj' in scope 'scope'
${scope.obj.prop}

${scope.obj01.prop01.obj02.prop02}

Arrays are list of primitives, objects or arrays. Elements in an array are referenced using index property notation, where the first element has index 0.

${scope.arr.0} // first element of array 'arr' in scope 'scope'
${scope.arr.1} // second element -"-

If an array contains complex types (objects or other arrays) and when properties in these elements are to be referenced, the following value-syntax must be used:

${scope.arr.1.value.prop} // property 'prop' on second element in arr

The value property of an array element is the actual value of the element whilst the index property of the array is the string representation of the element.

The value property is only used when traversing content of an array, not when targeting an element for expansion.

Predicates and other script evaluation (like ScriptEvalValve) has support for extensions. An extension is a library of functions in a namespace.

The following extension are available by default:

• str (common string operations)

• mv (multi-value support)

• dbg (debug)

• Ipv4 (IPv4 address matching)

The str extension contains string helper function for validation and comparison.

size

Returns the size/length of a string. If the supplied value isn't a string, -1 is returned.

Syntax

str.size(value)

Arguments

Example(s)

// Check if value is a string and larger than 3 characters
str.size(scope.value) > 3

isString

Returns true if the supplied value is a string, otherwise false.

Syntax

str.isString(value)

Arguments

Example(s)

str.isString('this is a string') // true
str.isString(99) // false (number)

isNullOrEmpty

Returns true if the supplied value is null/undefined or an empty string ("").

Syntax

str.isNullOrEmpty(value)

Arguments

Example(s)

str.isNullOrEmpty(null) // true
str.isNullOrEmpty("") // true
str.isNullOrEmpty('this is a string') // false

isNotNullOrEmpty

Returns true if the supplied value is a string and is not null/undefined or empty ("").

Syntax

str.isNotNullOrEmpty(value)

Arguments

Example(s)

str.isNotNullOrEmpty(null) // false
str.isNotNullOrEmpty("") // false
str.isNotNullOrEmpty('this is a string') // true

isEqual

Returns true if the supplied values are strings with identical content, possible with different case.

Syntax

str.isEqual(s1, s2[, ignoreCase])

Arguments

Example(s)

str.isEqual('string value', 'string value') // true
str.isEqual('string value', 'other string value') // false
str.isEqual('string value', 'STRING VALUE') // false
str.isEqual('string value', 'STRING VALUE', true) // true

isEqualIgnoreCase

Returns true if the supplied values are strings with identical content, always ignoring different case.

This function is equivalent to str.isEqual(s1, s2, true)

Syntax

str.isEqualIgnoreCase(s1, s2)

Arguments

Example(s)

str.isEqualIgnoreCase('string value', 'string value') // true
str.isEqualIgnoreCase('string value', 'other string value') // false
str.isEqualIgnoreCase('string value', 'STRING VALUE') // true

matchAny

Returns true if the supplied value match any of the supplied regular expressions (regex).

Syntax

str.matchAny(value, regex[,regex, ...])

Arguments

Example(s)

// plain string regex
str.matchAny('value', 'v.*') // true

// typed regex (format: /regex/flags)
str.matchAny('value', /v.*/) // true
str.matchAny('value', /[0-9]{1,3}/) // false

// case insensitive match using i-flag
str.matchAny('value', /V.*/i) // true 

Introduction

Predicates are boolean JavaScript expressions that must return either true or false.

Predicates are primary used for controlling execution and for filtering and are always evaluated during runtime.

Context data that can be used in the expression are available in scopes, defined by the current context. Scopes follow the same structure as for expansion, but using JavaScript types.

Syntax

A predicate MUST:

• be a string ("...")

• be valid JavaScript (ECMAScript 2023)

• evaluate to a boolean value (true/false) or a function that returns a boolean value

// Simple predicate that is always true
{
    "predicate": "true",
}

Since predicates are JavaScript all features of JavaScript are supported including, but not limited to:

• operators (==, !=, >, >=, <, <=)

• strict operators (===, !==)

• array indexing using bracket notation (arr[3])

• property access using bracket notation (obj['property-name'])

Extensions

Scopes

Scopes are the named top level objects containing context data (for example request or session). Available scopes depends on the context.

Data in scopes are accessed different depending on the type of objects included in the path, but adheres to the rules of JavaScript.

Extension containing debug utilities

describe

Describes a value, prints the result to stdout and returns the value.

Output will contain:

• Type ('string', 'array', 'object', 'number', etc)

• Value (concatenated to 32 chars)

• Length (if applicable)

• If value is an array (when type is 'object')

• If value is JSON (when type is 'string')

• JSON-type (when parsed)

• JSON-length (when parsed)

Syntax

dbg.describe(value[, label])

Arguments

Example

dbg.describe('this is a string', 'string')

// Will output:
--- Describing: string ---
Type: string
Value: this is a string
Length: 16
JSON? no