[TEST] OTP Download Verification – Whitepaper

What this page tests

This page exists only to validate the email-verification + gated download flow end-to-end on a real whitepaper detail route. The download target is a tiny ~800 byte placeholder PDF that should render in any browser/PDF viewer.

How to run the test

1. Open this page on the deployed site (or in firebase emulators:start).
2. Click "Get the Document" in the compact bar below the header (or in the end-of-article card).
3. Enter your name, a real email you can read, and check the consent box.
4. Click "Send Verification Code". Within ~10 seconds you should receive an email from support@leanabl.com with a 6-digit code.
5. Enter the code in the modal and click "Verify & Unlock Download".
6. The "Verified — You're all set" panel appears. Click "Download File" — the test PDF should download in a new tab.

Checks to perform

• A document is created in Firestore download_verifications/{id} at request time (codeHash, expiresAt).
• A document is created in Firestore leads/RES-... at verification time (type: "resource_download", verified: true).
• After verification, hitting the modal again from the same email + resource returns the same URL without re-sending an email.
• Entering a wrong code 5 times locks the verification; the next attempt requires a new code request.
• Requesting more than 5 codes for the same email in one hour returns rate_limited.