import { useMemo } from 'react';
import {
QueryObserverLoadingErrorResult,
QueryObserverLoadingResult,
QueryObserverRefetchErrorResult,
QueryObserverSuccessResult,
useQuery,
UseQueryOptions,
} from '@tanstack/react-query';
import useAuthProvider from './useAuthProvider';
import { useResourceContext } from '../core';
import { useRecordContext } from '../controller';
import { HintedString } from '../types';
/**
* A hook that calls the authProvider.canAccess() method using react-query for a provided resource and action (and optionally a record).
*
* The return value updates according to the request state:
*
* - start: { isPending: true }
* - success: { canAccess: true | false, isPending: false }
* - error: { error: [error from provider], isPending: false }
*
* Useful to enable or disable features based on users permissions.
*
* @param {Object} params Any params you want to pass to the authProvider
* @param {string} params.resource The resource to check access for
* @param {string} params.action The action to check access for
* @param {Object} params.record Optional. The record to check access for
*
* @returns Return the react-query result and a canAccess property which is a boolean indicating the access status
*
* @example
* import { useCanAccess } from 'react-admin';
*
* const PostDetail = () => {
* const { isPending, canAccess, error } = useCanAccess({
* resource: 'posts',
* action: 'read',
* });
* if (isPending || !canAccess) {
* return null;
* }
* if (error) {
* return
{error.message}
;
* }
* return ;
* };
*/
export const useCanAccess = <
RecordType extends Record = Record,
ErrorType extends Error = Error,
>(
params: UseCanAccessOptions
): UseCanAccessResult => {
const authProvider = useAuthProvider();
const resource = useResourceContext(params);
if (!resource) {
throw new Error(
'useCanAccess must be used inside a component or provide a resource prop'
);
}
const record = useRecordContext(params);
const { record: _record, ...restParams } = params;
const authProviderHasCanAccess = !!authProvider?.canAccess;
const queryResult = useQuery({
queryKey: [
'auth',
'canAccess',
{ ...restParams, recordId: record?.id, resource },
],
queryFn: async ({ signal }) => {
if (!authProvider || !authProvider.canAccess) {
return true;
}
return authProvider.canAccess({
...params,
record,
resource,
signal: authProvider.supportAbortSignal ? signal : undefined,
});
},
enabled: authProviderHasCanAccess,
...params,
});
const result = useMemo(() => {
// Don't check for the authProvider or authProvider.canAccess method in the useMemo
// to avoid unnecessary re-renders
return {
...queryResult,
canAccess: queryResult.data,
} as UseCanAccessResult;
}, [queryResult]);
return authProviderHasCanAccess
? result
: (emptyQueryObserverResult as unknown as UseCanAccessResult);
};
const emptyQueryObserverResult = {
canAccess: true,
data: true,
dataUpdatedAt: 0,
error: null,
errorUpdatedAt: 0,
errorUpdateCount: 0,
failureCount: 0,
failureReason: null,
fetchStatus: 'idle',
isError: false,
isInitialLoading: false,
isLoading: false,
isLoadingError: false,
isFetched: true,
isFetchedAfterMount: true,
isFetching: false,
isPaused: false,
isPlaceholderData: false,
isPending: false,
isRefetchError: false,
isRefetching: false,
isStale: false,
isSuccess: true,
status: 'success',
refetch: () => Promise.resolve(emptyQueryObserverResult),
};
export interface UseCanAccessOptions<
RecordType extends Record = Record,
ErrorType extends Error = Error,
> extends Omit, 'queryKey' | 'queryFn'> {
resource?: string;
action: HintedString<'list' | 'create' | 'edit' | 'show' | 'delete'>;
record?: RecordType;
}
export type UseCanAccessResult =
| UseCanAccessLoadingResult
| UseCanAccessLoadingErrorResult
| UseCanAccessRefetchErrorResult
| UseCanAccessSuccessResult;
export interface UseCanAccessLoadingResult
extends QueryObserverLoadingResult {
canAccess: undefined;
}
export interface UseCanAccessLoadingErrorResult
extends QueryObserverLoadingErrorResult {
canAccess: undefined;
}
export interface UseCanAccessRefetchErrorResult
extends QueryObserverRefetchErrorResult {
canAccess: boolean;
}
export interface UseCanAccessSuccessResult
extends QueryObserverSuccessResult {
canAccess: boolean;
}