Flutter Firebase中已启用2FA的用户修改密码异常问题

使用2FA（邮箱/电话验证）登录或注册时，调用signInWithEmailAndPassword后能正常捕获FirebaseAuthMultiFactorException，获取MultiFactorResolver完成二次验证即可登录。但修改密码时，沿用同样流程却无法捕获该异常，返回的是普通FirebaseException，无法获取二次验证所需的resolver。

代码实现 #

Future<void> changePassword({required String email, required String password, required String newPassword}) async{
    final user = _firebaseAuth.currentUser!;
    try{
      final cred = EmailAuthProvider.credential(email: email, password: password);
      await user.reauthenticateWithCredential(cred);
    } on FirebaseAuthMultiFactorException catch(e){
      log("i need to get resolver here but this line is never executed");
    } on FirebaseException catch(e){
      log("firebase exception, which doesn`t provide resolver");
      rethrow;
    }
  }

运行日志 #

[log] firebase exception, which doesn`t provide resolver
E/flutter (18929): [ERROR:flutter/runtime/dart_vm_initializer.cc(41)] Unhandled Exception: [firebase_auth/second-factor-required] Please complete a second factor challenge to finish signing into this account.
E/flutter (18929): #0      parseMultiFactorError (package:firebase_auth_platform_interface/src/method_channel/utils/exception.dart:106:5)
E/flutter (18929): #1      platformExceptionToFirebaseAuthException (package:firebase_auth_platform_interface/src/method_channel/utils/exception.dart:49:14)
E/flutter (18929): #2      convertPlatformException (package:firebase_auth_platform_interface/src/method_channel/utils/exception.dart:23:5)
E/flutter (18929): #3      MethodChannelUser.reauthenticateWithCredential (package:firebase_auth_platform_interface/src/method_channel/method_channel_user.dart:181:7)
E/flutter (18929): <asynchronous suspension>
E/flutter (18929): #4      User.reauthenticateWithCredential (package:firebase_auth/src/user.dart:452:7)
E/flutter (18929): <asynchronous suspension>
E/flutter (18929): #5      AuthRepository.changePassword (package:vendor/repositories/auth/auth_repository.dart:43:7)
E/flutter (18929): <asynchronous suspension>
E/flutter (18929): #6      new AuthBloc.<anonymous closure> (package:vendor/blocs/auth_bloc/auth_bloc.dart:50:7)
E/flutter (18929): <asynchronous suspension>
E/flutter (18929): #7      Bloc.on.<anonymous closure>.handleEvent (package:bloc/src/bloc.dart:226:13)
E/flutter (18929): <asynchronous suspension>

解决方案 #

问题根源在于Firebase Auth在重新认证场景下的异常处理逻辑和登录场景不同：reauthenticateWithCredential会将second-factor-required错误包装成普通FirebaseException，而非专门的FirebaseAuthMultiFactorException。需要手动从异常中解析多因子验证信息：

修改后的代码 #

import 'package:firebase_auth/firebase_auth.dart';
import 'package:firebase_auth_platform_interface/firebase_auth_platform_interface.dart';

Future<void> changePassword({required String email, required String password, required String newPassword}) async{
    final user = _firebaseAuth.currentUser!;
    try{
      final cred = EmailAuthProvider.credential(email: email, password: password);
      await user.reauthenticateWithCredential(cred);
      // 验证通过后执行修改密码
      await user.updatePassword(newPassword);
    } on FirebaseAuthMultiFactorException catch(e){
      // 兼容少数直接抛出该异常的场景
      final resolver = e.resolver;
      // 执行二次验证流程，比如弹出验证码输入界面
      final newCredential = await resolver.resolveSignIn();
      await user.reauthenticateWithCredential(newCredential);
      await user.updatePassword(newPassword);
    } on FirebaseException catch(e){
      if (e.code == 'second-factor-required') {
        // 从异常details中手动解析MultiFactorResolver
        final resolverData = e.details!['resolver'] as Map;
        final resolver = MultiFactorResolver._fromMap(
          _firebaseAuth,
          resolverData,
        );
        // 完成二次验证
        final newCredential = await resolver.resolveSignIn();
        // 用新凭证重新认证后修改密码
        await user.reauthenticateWithCredential(newCredential);
        await user.updatePassword(newPassword);
      } else {
        log("Firebase异常: ${e.message}");
        rethrow;
      }
    }
  }

关键说明 #

• MultiFactorResolver._fromMap是SDK内部构造方法，当前版本可正常使用，若后续SDK更新需注意适配
• 完成二次验证后，必须用新获取的凭证重新执行reauthenticateWithCredential，才能继续修改密码操作

内容的提问来源于stack exchange，提问作者Majestr32