cwdekker

Sekura REST Bridge for ACF securely exposes Advanced Custom Fields in the WordPress REST API. Based on <a href="https://github.com/airesvsg/acf-to-rest-api" rel="nofollow ugc">ACF to REST API</a> by Aires Goncalves, rebuilt with security as a first-class concern.
The original ACF to REST API plugin exposes all ACF field data to unauthenticated requests, including options pages (which often contain API keys and secrets), user profile fields, and fields on private/draft posts. This plugin fixes that with proper WordPress capability checks on every endpoint.
<h4>Features</h4>
<ul>
<li>Proper permission checks on every endpoint</li>
<li>Per-field Show in REST API / Edit in REST API toggles</li>
<li>Works alongside ACF Pro’s native REST support</li>
<li>Drop-in replacement for ACF to REST API (same acf/v3 namespace)</li>
<li>Filterable permissions for custom access control</li>
</ul>
<h4>Endpoints</h4>
<ul>
<li><code>GET /wp-json/acf/v3/{post_type}/{id}</code> – Get ACF fields for a post</li>
<li><code>GET /wp-json/acf/v3/{post_type}/{id}/{field}</code> – Get a specific field</li>
<li><code>PUT /wp-json/acf/v3/{post_type}/{id}</code> – Update ACF fields</li>
<li><code>GET /wp-json/acf/v3/options/{id}</code> – Get ACF options page fields</li>
<li><code>GET /wp-json/acf/v3/users/{id}</code> – Get ACF fields for a user</li>
<li><code>GET /wp-json/acf/v3/comments/{id}</code> – Get ACF fields for a comment</li>
</ul>
ACF data is also appended as an <code>acf</code> key on standard WP REST API responses.

Sekura REST Bridge for ACF

Expose Advanced Custom Fields in the WordPress REST API with proper access control.

Frankie Jarrett

Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/json-rest-api-force-ssl" rel="ugc">leaving a 5-star review</a>.
Note: This plugin requires the <a href="https://wordpress.org/plugins/json-rest-api/" rel="ugc">WP REST API (WP API)</a> plugin.
For site owners who want the WP REST API served over SSL always and forever.
All HTTP requests to the WP REST API will be 301 redirected to their HTTPS equivalent.
Also, don’t use this plugin unless you have an SSL certificate as your endpoints will break! 🙂
Development of this plugin is done <a href="https://github.com/fjarrett/json-rest-api-force-ssl" rel="nofollow ugc">on GitHub</a>. Pull requests welcome. Please see <a href="https://github.com/fjarrett/json-rest-api-force-ssl/issues" rel="nofollow ugc">issues reported</a> there before going to the plugin forum.

WP REST API Force SSL

Force WP REST API endpoints to only be served over HTTPS.

Sekura REST Bridge for ACF vs WP REST API Force SSL