Hi, I am trying to implement the recovery flow in my flutter app. I am able to start the flow and receive the code per email, but do not really know how what to do next. I tryied to update the RecoveryFlow with that code, but it sends me a new one. Any hints? @steep-lamp-91158

Hi, could you enable “continue_with” flow transitions on https://console.ory.sh/projects/current/features? That is required to make native recovery work. Let me know, if that changes anything.

Hi, the flag was not set. However, after setting it, once I update the

RecoveryFlow

with the code, the returned

RecoveryFlow

state is still on

sentEmail

. This is how i initiate the flow:

Response<RecoveryFlow> recoveryFlow =
          await _oryFrontendApi.createNativeRecoveryFlow();

      UpdateRecoveryFlowWithCodeMethod updateRecovery =
          UpdateRecoveryFlowWithCodeMethod((b) {
        b.email = email;
        b.method = UpdateRecoveryFlowWithCodeMethodMethodEnum.code;
      });

      UpdateRecoveryFlowBodyBuilder builder = UpdateRecoveryFlowBodyBuilder();
      builder.oneOf = OneOfDynamic(
          typeIndex: 0,
          types: [UpdateRecoveryFlowWithCodeMethod],
          value: updateRecovery);

      Response<RecoveryFlow> recoveryFlowResponse =
          await _oryFrontendApi.updateRecoveryFlow(
        flow: recoveryFlow.data!.id,
        updateRecoveryFlowBody: builder.build(),
      );

And this is how I update it with the code:

Response<RecoveryFlow> recoveryFlow =
          await _oryFrontendApi.getRecoveryFlow(id: recoveryFlowId);

      UpdateRecoveryFlowWithCodeMethod updateRecovery =
          UpdateRecoveryFlowWithCodeMethod((b) {
        b.code = code;
        b.method = UpdateRecoveryFlowWithCodeMethodMethodEnum.code;
      });

      UpdateRecoveryFlowBodyBuilder builder = UpdateRecoveryFlowBodyBuilder();
      builder.oneOf = OneOfDynamic(
          typeIndex: 0,
          types: [UpdateRecoveryFlowWithCodeMethod],
          value: updateRecovery);

      Response<RecoveryFlow> response =
          await _oryFrontendApi.updateRecoveryFlow(
        flow: recoveryFlow.data!.id,
        updateRecoveryFlowBody: builder.build(),
      );

are there any messages in the returned flow? Could you paste the flow object or the id of the flow here?

This is the Flow object I get from

updateRecoveryFlow

: _$RecoveryFlow (RecoveryFlow { active=code, expiresAt=2024-02-05 102531.227621Z, id=01a9310c-eb84-429f-a204-67b976fb8520, issuedAt=2024-02-05 095531.227621Z, requestUrl=https://api.accounts.hgv.it/self-service/recovery/api, state=sentEmail, type=api, ui=UiContainer { action=https://api.accounts.hgv.it/self-service/recovery?flow=01a9310c-eb84-429f-a204-67b976fb8520, messages=[UiText { id=4060006, text=The recovery code is invalid or has already been used. Please try again., type=error, }], method=POST, nodes=[UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=csrf_token, nodeType=input, required_=true, type=hidden, value=, }, }, group=default_, messages=[], meta=UiNodeMeta { }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=code, nodeType=input, pattern=[0-9]+, required_=true, type=text, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070010, text=Recovery code, type=info, }, }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=method, nodeType=input, type=hidden, value=code, }, }, group=code, messages=[], meta=UiNodeMeta { }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=method, nodeType=input, type=submit, value=code, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070005, text=Submit, type=info, }, }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=email, nodeType=input, type=submit, value=emaborsa2@gmail.com, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070008, text=Resend code, type=info, }, }, type=input, }], }, })

The recovery code is invalid or has already been used. Please try again.

Looks like the code is invalid. make sure there is no whitespace around the code.

Ups, didn't see that message, since in the debugging object it is a little bit nested. However, I get always that message, even if I start a new flow.

you get the message after you call

createNativeRecoveryFlow

?

No, the

createNativeRecoveryFlow

always works, I get the code per email. The

updateRecoveryFlow

to supply the code always returns that message.

We have a new example here: https://github.com/ory/examples/tree/master/flutter-ory-network

I forgot to set the email when I submitted the code: https://github.com/ory/examples/blob/e61b8622ef65551c7ca55865d66ebe796fc54c29/flutter-ory-network/lib/services/auth.dart#L352 Now I have an other message: _$RecoveryFlow (RecoveryFlow { active=code, expiresAt=2024-02-05 111413.689468Z, id=19e42af2-77f3-47ae-885a-1d2b5f2fc998, issuedAt=2024-02-05 104413.689468Z, requestUrl=https://api.accounts.hgv.it/self-service/recovery/api, state=sentEmail, type=api, ui=UiContainer { action=https://api.accounts.hgv.it/self-service/recovery?flow=19e42af2-77f3-47ae-885a-1d2b5f2fc998, messages=[UiText { id=1060003, text=An email containing a recovery code has been sent to the email address you provided. If you have not received an email, check the spelling of the address and make sure to use the address you registered with., type=info, }], method=POST, nodes=[UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=csrf_token, nodeType=input, required_=true, type=hidden, value=, }, }, group=default_, messages=[], meta=UiNodeMeta { }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=code, nodeType=input, pattern=[0-9]+, required_=true, type=text, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070010, text=Recovery code, type=info, }, }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=method, nodeType=input, type=hidden, value=code, }, }, group=code, messages=[], meta=UiNodeMeta { }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=method, nodeType=input, type=submit, value=code, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070005, text=Submit, type=info, }, }, type=input, }, UiNode { attributes=UiNodeAttributes { oneOf=UiNodeInputAttributes { disabled=false, name=email, nodeType=input, type=submit, value=emaborsa2@gmail.com, }, }, group=code, messages=[], meta=UiNodeMeta { label=UiText { id=1070008, text=Resend code, type=info, }, }, type=input, }], }, }) And do not have the

continueWith

property: https://github.com/ory/examples/blob/e61b8622ef65551c7ca55865d66ebe796fc54c29/flutter-ory-network/lib/services/auth.dart#L360

text=An email containing a recovery code has been sent to the email address you provided. If you have not received an email, check the spelling of the address and make sure to use the address you registered with.,

If you submit an email, we assume you want to receive a new code. you only get continue_with if the code was correct.

Sorry but, IF the code isn't correct, shouldn't be the message be something "...wrong code..."?

text=The recovery code is invalid or has already been used. Please try again.,

this is the message you’re getting, right? It does state that the code is wrong.

With the code: OneOf1<UpdateRecoveryFlowWithCodeMethod> oneOf = OneOf.fromValue1( value: UpdateRecoveryFlowWithCodeMethod((b) => b ..method = UpdateRecoveryFlowWithCodeMethodMethodEnum.code ..email = email ..code = code)); Response<RecoveryFlow> recoveryFlow = await _oryFrontendApi.getRecoveryFlow(id: recoveryFlowId); Response<RecoveryFlow> response = await _oryFrontendApi.updateRecoveryFlow( flow: recoveryFlow.data!.id, updateRecoveryFlowBody: UpdateRecoveryFlowBody((b) => b..oneOf = oneOf));

An email containing a recovery code has been sent to the email address you provided. If you have not received an email, check the spelling of the address and make sure to use the address you registered with

yes, you’re submitting an email address here, which we take as “you want to receive a new code” (e.g. re-sending the code). In the code example, that value is most likely empty, which is why it works.

Ok, I think I got it. Thanx.