
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
rpa-data-json-server
Advanced tools
JSON Server Data Provider for react-plus-admin, the frontend framework for building admin applications on top of REST services.
npm install --save rpa-data-json-server
This Data Provider fits REST APIs powered by JSON Server, such as JSONPlaceholder.
| Method | API calls |
|---|---|
getList | GET http://my.api.url/posts?_sort=title&_order=ASC&_start=0&_end=24&title=bar |
getOne | GET http://my.api.url/posts/123 |
getMany | GET http://my.api.url/posts?id=123&id=456&id=789 |
getManyReference | GET http://my.api.url/posts?author_id=345 |
create | POST http://my.api.url/posts |
update | PUT http://my.api.url/posts/123 |
updateMany | PUT http://my.api.url/posts/123, PUT http://my.api.url/posts/456, PUT http://my.api.url/posts/789 |
delete | DELETE http://my.api.url/posts/123 |
Note: The JSON Server REST Data Provider expects the API to include a X-Total-Count header in the response to getList and getManyReference calls. The value must be the total number of resources in the collection. This allows react-admin to know how many pages of resources there are in total, and build the pagination controls.
X-Total-Count: 319
If your API is on another domain as the JS code, you'll need to whitelist this header with an Access-Control-Expose-Headers CORS header.
Access-Control-Expose-Headers: X-Total-Count
// in src/App.js
import * as React from "react";
import { Admin, Resource } from 'react-plus-admin';
import jsonServerProvider from 'rpa-data-json-server';
import { PostList } from './posts';
const App = () => (
<Admin dataProvider={jsonServerProvider('https://jsonplaceholder.typicode.com')}>
<Resource name="posts" list={PostList} />
</Admin>
);
export default App;
The provider function accepts an HTTP client function as second argument. By default, they use react-admin's fetchUtils.fetchJson() as HTTP client. It's similar to HTML5 fetch(), except it handles JSON decoding and HTTP error codes automatically.
That means that if you need to add custom headers to your requests, you just need to wrap the fetchJson() call inside your own function:
import { fetchUtils, Admin, Resource } from 'react-plus-admin';
import jsonServerProvider from 'rpa-data-json-server';
const httpClient = (url, options = {}) => {
if (!options.headers) {
options.headers = new Headers({ Accept: 'application/json' });
}
// add your own headers here
options.headers.set('X-Custom-Header', 'foobar');
return fetchUtils.fetchJson(url, options);
};
const dataProvider = jsonServerProvider('https://jsonplaceholder.typicode.com', httpClient);
render(
<Admin dataProvider={dataProvider} title="Example Admin">
...
</Admin>,
document.getElementById('root')
);
Now all the requests to the REST API will contain the X-Custom-Header: foobar header.
Tip: The most common usage of custom headers is for authentication. fetchJson has built-on support for the Authorization token header:
const httpClient = (url, options = {}) => {
options.user = {
authenticated: true,
token: 'SRTRDFVESGNJYTUKTYTHRG'
};
return fetchUtils.fetchJson(url, options);
};
Now all the requests to the REST API will contain the Authorization: header.
FAQs
JSON Server data provider for react-plus-admin
We found that rpa-data-json-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.