Drupal's JSON:API in Core: Zero-Config Headless Backends Without Custom Controllers
Drupal's JSON:API module has shipped in core since 8.7, exposing every entity type as a spec-compliant RESTful API with filtering, pagination, sparse fieldsets, and compound documents — zero custom controllers required. Covers a fetch example, access control, cache tags, and production limits.