What's New
✨ Features
- Two-Factor Authentication — TOTP authenticator app support (Google Authenticator, Authy, 1Password) with 10 single-use backup codes. Enable via
twoFactorAuthPluginand enroll from Admin → Settings → Security. - GraphQL plugin — full document CRUD via GraphQL. Enable
graphqlPluginfor/graphqlendpoint with GraphiQL explorer.
🔒 Security
- XSS fix — escape media field values in dynamic fields against stored XSS
🐛 Fixes
- Preserve content title on edit for schemas without explicit
titleproperty - Stop auto-installing plugins on detail page click
- Use
127.0.0.1instead oflocalhostfor CORS_ORIGINS defaults - UI spacing between Two-Factor Recovery and Danger Zone panels
Installation
npm create sonicjs@latest my-appOr update existing project:
npm install @sonicjs-cms/core@3.0.0-beta.28