fix: prevent repeated Doodstream OTP requests

Coalesce concurrent and repeated Doodstream login checks by credential identity, keep the challenged cookie session for OTP verification, and rate-limit explicit code resends. Prefer an existing Doodstream API key during health checks and add regression coverage for imports with duplicate accounts, concurrent checks, expired challenges, and session reuse.
2026-08-31 18:45:37 +02:00
parent 317ff3f035
commit 40ce83d413
10 changed files with 300 additions and 38 deletions
@@ -51,6 +51,8 @@ test('translates managed online backup controls in both directions', () => {
 test('translates the account check timestamp label', () => {
  assert.equal(translateText('geprüft', 'en'), 'checked');
  assert.equal(translateText('checked', 'de'), 'geprüft');
+  assert.equal(translateText('Neuen Code anfordern', 'en'), 'Request new code');
+  assert.equal(translateText('The OTP request has expired. Request a new code.', 'de'), 'OTP-Anfrage ist abgelaufen. Bitte einen neuen Code anfordern.');
 });

 test('translates settings search result labels in both directions', () => {