Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
aor-dependent-input
Advanced tools
A component for displaying input depending on other inputs values in Admin-on-rest
A component for displaying inputs and fields depending on other inputs or fields values in Admin-on-rest.
Install with:
npm install --save aor-dependent-input
or
yarn add aor-dependent-input
Check that the field specified by dependsOn
has a value (a truthy value):
import { DependentInput } from 'aor-dependent-input';
export const UserCreate = (props) => (
<Create {...props}>
<SimpleForm>
<TextInput source="firstName" />
<TextInput source="lastName" />
<BooleanInput source="hasEmail" label="Has email ?" />
<DependentInput dependsOn="hasEmail">
<TextInput source="email" />
</DependentInput>
</SimpleForm>
</Create>
);
Check that the field specified by dependsOn
has a specific value:
import { DependentInput } from 'aor-dependent-input';
export const PostCreate = (props) => (
<Create {...props}>
<SimpleForm>
<TextInput source="title" />
<SelectInput source="category" choices={[
{ id: 'programming', name: 'Programming' },
{ id: 'lifestyle', name: 'Lifestyle' },
{ id: 'photography', name: 'Photography' },
]} />
<DependentInput dependsOn="category" value="programming">
<SelectInput source="subcategory" choices={[
{ id: 'js', name: 'JavaScript' },
{ id: 'net', name: '.NET' },
{ id: 'java', name: 'Java' },
]} />
</DependentInput>
<DependentInput dependsOn="category" value="lifestyle">
<SelectInput source="subcategory" choices={[
...
]} />
</DependentInput>
<DependentInput dependsOn="category" value="photography">
<SelectInput source="subcategory" choices={[
...
]} />
</DependentInput>
</SimpleForm>
</Create>
);
Check that the field specified by dependsOn
matches a custom constraint:
import { DependentInput } from 'aor-dependent-input';
const checkCustomConstraint = (value) => value.startsWith('programming'));
export const PostCreate = (props) => (
<Create {...props}>
<SimpleForm>
<TextInput source="title" />
<SelectInput source="category" choices={[
{ id: 'programming_js', name: 'JavaScript' },
{ id: 'programming_net', name: '.NET' },
{ id: 'programming_java', name: 'Java' },
{ id: 'lifestyle', name: 'Lifestyle' },
{ id: 'photography', name: 'Photography' },
]} />
<DependentInput dependsOn="category" resolve={checkCustomConstraint}>
<SelectInput source="subcategory" choices={[
{ id: 'js', name: 'JavaScript' },
{ id: 'net', name: '.NET' },
{ id: 'java', name: 'Java' },
]} />
</DependentInput>
</SimpleForm>
</Create>
);
All powers! Check whether the current full record matches your constraints:
import { DependentInput } from 'aor-dependent-input';
const checkRecord = (record) => record.firstName && record.lastName);
export const UserCreate = (props) => (
<Create {...props}>
<SimpleForm>
<TextInput source="firstName" />
<TextInput source="lastName" />
<DependentInput resolve={checkRecord}>
<EmailInput source="email" />
</DependentInput>
</SimpleForm>
</Create>
);
The DependentInput
and DependentField
components accepts the following props:
Either a string indicating the name of the field to check (eg: hasEmail
) or an array of fields to check (eg: ['firstName', 'lastName']
).
You can specify deep paths such as author.firstName
.
If not specified, only check that the field(s) specified by dependsOn
have a truthy value.
You may specify a single value or an array of values. Deep paths will be correctly retrieved and compared to the specified values.
If both value
and resolve
are specified, value
will be ignored.
The resolve
prop accepts a function which must return either true
to display the child input or false
to hide it.
If the dependsOn
prop is specified, resolve
will be called with either the value of the field specified by dependsOn
(when a single field name was specified as dependsOn
) or with an object matching the specified paths.
Note: When specifying deep paths (eg: author.firstName
), resolve
will be called with an object matching the specified structure. For example, when passing ['author.firstName', 'author.lastName']
as dependsOn
, the resolve
function will be passed the following object:
{ author: { firstName: 'bValue', lastName: 'cValue' } }
If dependsOn
is not specified, resolve
will be called with the current form values (DependentInput
) or the full record (DependentField
).
If both value
and resolve
are specified, value
will be ignored.
This could be necessary to implement cascaded select. For example, a song may have a genre and a sub genre, which are retrieved with calls to an external service not hosted in our API. This is how we could display only the sub genres for the selected genre:
// in SubGenreInput.js
import React, { Component } from 'react';
import { translate, SelectInput } from 'admin-on-rest';
import fetchSubGenres from './fetchSubGenres';
class SubGenreInput extends Component {
state = {
subgenres: [],
}
componentDidMount() {
this.fetchData(this.props);
}
componentWillReceiveProps(nextProps) {
if (nextProps.dependsOnValue !== this.props.dependsOnValue) {
this.fetchData(nextProps);
}
}
fetchData(props) {
fetchSubGenres(props.dependsOnValue).then(subgenres => {
this.setState({ subgenres });
})
}
render() {
return <SelectInput {...this.props} choices={this.state.subgenres} />
}
}
SubGenreInput.propTypes = SelectInput.propTypes;
SubGenreInput.defaultProps = SelectInput.defaultProps;
export default SubGenreInput;
Run the tests with this command:
make test
Coverage data is available in ./coverage
after executing make test
.
An HTML report is generated in ./coverage/lcov-report/index.html
.
FAQs
A component for displaying input depending on other inputs values in Admin-on-rest
We found that aor-dependent-input demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.