
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@dwolla/react-drop-ins
Advanced tools
React bindings for Dwolla's drop-in components. This library provides a React hook for importing the dwolla-web.js library and a set of React components for using the drop-in components.
# using npm
$ npm i @dwolla/react-drop-ins
# using yarn
$ yarn add @dwolla/react-drop-ins
# using pnpm
$ pnpm add @dwolla/react-drop-ins
An example React component demonstrating how to use the library and the DwollaCustomerCreate component can be found in the examples directory.
View a live demo of all components. Switch to the Docs tab and click on Show code to see the implementation code for each component.
In order to use this package, you will first need to set up your application to be able to make calls to the Dwolla API. You can use one of our SDKs in your preferred language to get up and running quickly.
Then you will need to set up a server-side endpoint for generating client tokens. You can do this by following the steps in the Generate a Client Token guide.
You're now ready to start using the package!
Create a configuration object for the useDwollaWeb hook as shown in the code example below. This hook will import the dwolla-web.js library and handle any errors that may occur during import.
The full list of configuration options for the hook can be found in the table below.
// Import the useDwollaWeb hook and the DwollaCustomerCreate component
import { DwollaCustomerCreate, useDwollaWeb } from '@dwolla/react-drop-ins';
import type { DwollaWebOptions } from '@dwolla/react-drop-ins';
// Create configuration for the useDwollaWeb hook
const config: DwollaWebOptions = {
environment: 'sandbox',
onError: function error() {
console.log('Error');
},
onSuccess: function success() {
console.log('Success');
},
tokenUrl: '/yourTokenUrl'
};
const App = () => {
// Initialize the useDwollaWeb hook
const { ready, error } = useDwollaWeb(config);
// Wait for the hook to be ready
if (!ready) return <div>Loading...</div>;
// Handle errors
if (error) return <div>Error</div>;
// Render the DwollaCustomerCreate component when ready
return (
<>
<DwollaCustomerCreate />
</>
);
};
export default App;
useDwollaWeb| Parameter | Type | Required? | Description |
|---|---|---|---|
| environment | string | yes | Acceptable values of: sandbox or production |
| styles | string | no | Optional. A relative or absolute URL linking to a hosted stylesheet containing component styles. |
| token | function | conditional | A function that gets called by the component for fetching client-tokens as needed throughout the flow. Example usage: token: (req) => Promise.resolve(dwollaAPIToken(req, {blah: "abcd"})) Not required if tokenUrl is used. |
| tokenUrl | function | conditional | A URL pointing to a server-side endpoint that can be used to generate client-token. Example usage: tokenUrl: "tokenUrl". Not required if token is used. |
| success | function | no | A function that gets called upon a successful request from the Component. |
| error | function | no | A function that gets called when an error occurs in the Component. |
Note: You can use either token or tokenUrl in the config options for generating a client token, but not both. Check out the tokenUrl vs token configuration section in the docs for more information on the differences between the two.
To learn more about Dwolla and how to integrate our product with your application, please consider visiting some of the following resources and becoming a member of our community!
FAQs
React bindings for Dwolla's drop-in components
We found that @dwolla/react-drop-ins demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.