Recovery codes for use with TOTP MFA

[tylerjames]

State your question I would like to set up TOTP (authenticator app) based 2FA in my app. I can get this set up relatively easily but I would like to provide users with some backup codes in the event that they lose access to their authenticator.

This seems to be common practice when using MFA (try adding 2FA to your Github account right now and see what happens) but I can't seem to find how to do it with Cognito.

Does this concept/feature exist with Cognito?

Amusingly, ChatGPT thinks that it does and it provided this solution:

awsMobileClient.getRecoveryCode { (result, error) in
  if let error = error {
    print("Error fetching recovery code: \(error.localizedDescription)")
  } else if let result = result {
    let recoveryCode = result.recoveryCode
    print("Recovery code: \(recoveryCode)")
  }
}

But I can't seem to find any mention of this method anywhere in the library. Either it was removed or ChatGPT is just feeding my a BS answer.

Which AWS Services are you utilizing? Cognito

Provide code snippets (if applicable)

Environment(please complete the following information):

• SDK Version: 2.30.4
• Dependency Manager: SPM
• Swift Version : 5

[harsh62]

Unfortunately, there is no API called getRecoveryCode. This is a known limitation in Cognito.

[tylerjames]

So ChatGPT lied to me?

Begun, the AI wars have

[tylerjames]

@harsh62 Any idea about this one then? https://github.com/aws-amplify/aws-sdk-ios/issues/4632

Trying implement MFA but mitigate the risks for users getting permanently locked out of their accounts.

[harsh62]

Definitely. I will take a look and comment on that issue.