I'm currently testing out caveats in the playground and stuck with writing assertions with maps. I've got following caveat (like the one in the caveat documentation):

caveat attributes_match(expected map<any>, provided map<any>) {
    expected.isSubtreeOf(provided)
}

So how can I write the assertion to include maps?

... with {"attributes_match": ????}

Can you give me an example? Many thanks!

we definitely need a few more examples of this in the docs if your schema is:

definition platform {
    relation administrator: user with attributes_match
    permission super_admin = administrator
}

then you can write an assertion like this:

platform:demo#super_admin@user:bob with {"session": {"active": true, "iss": "google"}}

Thx, but somehow the assertion doesn't match the caveat?

you don't need the caveat name in the assertion

ah ...

it's possible for multiple caveats to use the same context data

Now it works: https://play.authzed.com/s/CjjdWpijU7qJ/assertions Many thanks.

yep! you just need to write it in the schema:

relation administrator: user with caveat1 | user with caveat2