Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello!

I am implementing password recovery flow and would like to make fully custom UI and sending recovery email in our own system not using ORY for sending email.

I looked to ORY api documentesion and trying to do it like this:
1. From UI we ask user email and then trigger our own api request
2. From our BE we will trigger ORY api request `POST /admin/recovery/code` to get code and send to user email with this code what we get there
3. Now will customer get the code and sends it for us with new password

After that I would like to run some ORY API requests to update user password but I am struggling to find this kind API call what I can se to update user password using recovery code.

Do I miss something or how it should work when I would like to have custom UI and I would like to send email in our system?

Is there possibility to send recovery code using `POST /admin/recovery/code` and then somehow validate this recovery code and let user set new password?

Or only way hoe to do recovery password is using ORY email service?