JSON:API Frontend Webform

Optional integration module for jsonapi_frontend that makes Drupal Webforms work cleanly in hybrid headless setups.

Project page: https://www.drupal.org/project/jsonapi_frontend_webform

What it does

Drupal Webform routes are not content entities, so they don’t naturally map to a JSON:API resource URL. This module extends /jsonapi/resolve so that Webform routes (including aliased paths like /contact) resolve as non-headless and return a drupal_url.

This enables:

• Split routing: frontends can redirect to Drupal for Webform pages.
• Frontend-first: frontends can proxy Webform routes to the Drupal origin.

Install

composer require drupal/webform
composer require drupal/jsonapi_frontend_webform
drush en jsonapi_frontend_webform

Notes

• This module is intentionally hybrid-first: it keeps Webform rendering + submissions on Drupal.
• Fully headless Webform rendering is a separate problem (REST resources, auth, CORS/CSRF, file uploads). See ROADMAP.md.

Security & caching

• Webforms are rendered by Drupal; frontends should redirect/proxy rather than attempting browser-side submissions against protected origins.
• For proxy/rate limiting guidance, see jsonapi_frontend’s MIGRATION.md (Security hardening section).