prebid.js 8.5.0 → 8.6.0

package/modules/viantOrtbBidAdapter.md

@@ -0,0 +1,54 @@
+# Overview
+
+Module Name: VIANT Bidder Adapter
+Module Type: Bidder Adapter
+Maintainer: dist-runtime@viantinc.com
+
+# Description
+
+An adapter to get a bid from VIANT DSP.
+
+# Test Parameters
+```javascript
+    var adUnits = [            // Banner adUnit with only required parameters
+        {
+            code: 'test-div-minimal',
+            mediaTypes: {
+                banner: {
+                    sizes: [[728, 90]]
+                }
+            },
+            bids: [
+                {
+                    bidder: 'viant',
+                    params: {
+                        supplySourceId: 'supplier',
+                        publisherId: '464'
+                    }
+                }
+            ]
+        },
+        {
+            code: 'test-div-minimal-video',
+            mediaTypes: {
+                video: {
+                    playerSize: [640, 480],
+                    context: 'outstream'
+                }
+            },
+            bids: [
+                {
+                    bidder: 'viant',
+                    params: {
+                        supplySourceId: 'supplier',
+                        publisherId: '464' // required
+                    }
+                }
+            ]
+        }    
+    ];
+```
+
+Where:
+
+* placementId - Placement ID of the ad unit (required)

package/modules/vidazooBidAdapter.js

@@ -320,13 +320,20 @@ function interpretResponse(serverResponse, request) {
   }
 }
 
-function getUserSyncs(syncOptions, responses, gdprConsent = {}, uspConsent = '') {
+function getUserSyncs(syncOptions, responses, gdprConsent = {}, uspConsent = '', gppConsent = {}) {
   let syncs = [];
   const {iframeEnabled, pixelEnabled} = syncOptions;
   const {gdprApplies, consentString = ''} = gdprConsent;
+  const {gppString, applicableSections} = gppConsent;
 
   const cidArr = responses.filter(resp => deepAccess(resp, 'body.cid')).map(resp => resp.body.cid).filter(uniques);
-  const params = `?cid=${encodeURIComponent(cidArr.join(','))}&gdpr=${gdprApplies ? 1 : 0}&gdpr_consent=${encodeURIComponent(consentString || '')}&us_privacy=${encodeURIComponent(uspConsent || '')}`
+  let params = `?cid=${encodeURIComponent(cidArr.join(','))}&gdpr=${gdprApplies ? 1 : 0}&gdpr_consent=${encodeURIComponent(consentString || '')}&us_privacy=${encodeURIComponent(uspConsent || '')}`;
+
+  if (gppString && applicableSections?.length) {
+    params += '&gpp=' + encodeURIComponent(gppString);
+    params += '&gpp_sid=' + encodeURIComponent(applicableSections.join(','));
+  }
+
   if (iframeEnabled) {
     syncs.push({
       type: 'iframe',

package/modules/videojsVideoProvider.js

@@ -201,8 +201,15 @@ export function VideojsProvider(providerConfig, vjs_, adState_, timeState_, call
       return;
     }
 
-    player.ima.changeAdTag(adTagUrl);
-    player.ima.requestAds();
+    // The VideoJS IMA plugin version 1.11.0 will throw when the ad is empty.
+    try {
+      player.ima.changeAdTag(adTagUrl);
+      player.ima.requestAds();
+    } catch (e) {
+      /*
+      Handling is not required; ad errors are emitted automatically by video.js
+       */
+    }
   }
 
   function onEvent(type, callback, payload) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prebid.js",
-  "version": "8.5.0",
+  "version": "8.6.0",
   "description": "Header Bidding Management Library",
   "main": "src/prebid.js",
   "scripts": {

package/test/spec/libraries/mspa/activityControls_spec.js

@@ -1,220 +1,153 @@
-import {mspaRule, setupRules, isTransmitUfpdConsentDenied, isTransmitGeoConsentDenied, isBasicConsentDenied, isSensitiveNoticeMissing, isConsentDenied} from '../../../../libraries/mspa/activityControls.js';
+import {mspaRule, setupRules, isTransmitUfpdConsentDenied, isTransmitGeoConsentDenied, isBasicConsentDenied, sensitiveNoticeIs, isConsentDenied} from '../../../../libraries/mspa/activityControls.js';
 import {ruleRegistry} from '../../../../src/activities/rules.js';
-describe('isBasicConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (basic consent conditions pass) with variety of notice and opt in', () => {
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (basic consent conditions do not pass) with personal data consent set to true (invalid state)', () => {
-    cd.PersonalDataConsents = 2;
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.PersonalDataConsents = 0;
-  });
-  it('should be true (basic consent conditions do not pass) with sensitive opt in but no notice', () => {
-    cd.SensitiveDataLimitUseNotice = 0;
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
-describe('isSensitiveNoticeMissing', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (sensitive notice is given or not needed) with variety of notice and opt in', () => {
-    const result = isSensitiveNoticeMissing(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (sensitive notice is missing) with variety of notice and opt in', () => {
-    cd.SensitiveDataLimitUseNotice = 2;
-    const result = isSensitiveNoticeMissing(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
-describe('isConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (consent given personalized ads / sale / share) with variety of notice and opt in', () => {
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (no consent) on opt out of targeted ads via TargetedAdvertisingOptOut', () => {
-    cd.TargetedAdvertisingOptOut = 1;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOut = 2;
-  });
-  it('should be true (no consent) on opt out of targeted ads via no TargetedAdvertisingOptOutNotice', () => {
-    cd.TargetedAdvertisingOptOutNotice = 2;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOutNotice = 1;
-  });
-  it('should be true (no consent) if TargetedAdvertisingOptOutNotice is 0 and TargetedAdvertisingOptOut is 2', () => {
-    cd.TargetedAdvertisingOptOutNotice = 0;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOutNotice = 1;
-  });
-})
-describe('isTransmitUfpdConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (consent given to add ufpd) with variety of notice and opt in', () => {
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (consent denied to add ufpd) if no consent to process health information', () => {
-    cd.SensitiveDataProcessing[2] = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataProcessing[2] = 0;
-  });
-  it('should be true (consent denied to add ufpd) with consent to process biometric data, as this should not be on openrtb', () => {
-    cd.SensitiveDataProcessing[6] = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataProcessing[6] = 1;
-  });
-  it('should be true (consent denied to add ufpd) without sharing notice', () => {
-    cd.SharingNotice = 2;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SharingNotice = 1;
-  });
-  it('should be true (consent denied to add ufpd) with sale opt out', () => {
-    cd.SaleOptOut = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SaleOptOut = 2;
-  });
-  it('should be true (consent denied to add ufpd) without targeted ads opt out', () => {
-    cd.TargetedAdvertisingOptOut = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOut = 2;
-  });
-  it('should be true (consent denied to add ufpd) with missing sensitive data limit notice', () => {
-    cd.SensitiveDataLimitUseNotice = 2;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
 
-describe('isTransmitGeoConsentDenied', () => {
-  const cd = {
-    // not covered, opt out of geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be true (consent denied to add precise geo) -- sensitive flag denied', () => {
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(true);
+describe('Consent interpretation', () => {
+  function mkConsent(flags) {
+    return Object.assign({
+      // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
+      Gpc: 0,
+      KnownChildSensitiveDataConsents: [0, 0],
+      MspaCoveredTransaction: 2,
+      MspaOptOutOptionMode: 0,
+      MspaServiceProviderMode: 0,
+      PersonalDataConsents: 0,
+      SaleOptOut: 2,
+      SaleOptOutNotice: 1,
+      SensitiveDataLimitUseNotice: 1,
+      SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
+      SensitiveDataProcessingOptOutNotice: 1,
+      SharingNotice: 1,
+      SharingOptOut: 2,
+      SharingOptOutNotice: 1,
+      TargetedAdvertisingOptOut: 2,
+      TargetedAdvertisingOptOutNotice: 1,
+      Version: 1
+    }, flags)
+  }
+  describe('isBasicConsentDenied', () => {
+    it('should be false (basic consent conditions pass) with variety of notice and opt in', () => {
+      const result = isBasicConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    it('should be true (basic consent conditions do not pass) with personal data consent set to true (invalid state)', () => {
+      const result = isBasicConsentDenied(mkConsent({
+        PersonalDataConsents: 2
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should not deny when consent for under-13 is null', () => {
+      expect(isBasicConsentDenied(mkConsent({
+        KnownChildSensitiveDataConsents: [0, null]
+      }))).to.be.false;
+    })
   });
-  it('should be true (consent denied to add precise geo) -- sensitive data limit usage not given', () => {
-    cd.SensitiveDataLimitUseNotice = 0;
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
+
+  describe('isConsentDenied', () => {
+    it('should be false (consent given personalized ads / sale / share) with variety of notice and opt in', () => {
+      const result = isConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    it('should be true (no consent) on opt out of targeted ads via TargetedAdvertisingOptOut', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOut: 1
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be true (no consent) on opt out of targeted ads via no TargetedAdvertisingOptOutNotice', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOutNotice: 2
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be true (no consent) if TargetedAdvertisingOptOutNotice is 0 and TargetedAdvertisingOptOut is 2', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOutNotice: 0
+      }));
+      expect(result).to.equal(true);
+    });
+    it('requires also SharingNotice to accept opt-in for Sharing', () => {
+      expect(isConsentDenied(mkConsent({
+        SharingNotice: 0
+      }))).to.be.true;
+    })
   });
-  it('should be false (consent given to add precise geo) -- sensitive position 8 (index 7) is true', () => {
-    cd.SensitiveDataProcessing[7] = 2;
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(false);
-    cd.SensitiveDataProcessing[7] = 1;
+
+  describe('isTransmitUfpdConsentDenied', () => {
+    it('should be false (consent given to add ufpd) with variety of notice and opt in', () => {
+      const result = isTransmitUfpdConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    Object.entries({
+      'health information': 2,
+      'biometric data': 6,
+    }).forEach(([t, flagNo]) => {
+      it(`'should be true (consent denied to add ufpd) if no consent to process ${t}'`, () => {
+        const consent = mkConsent();
+        consent.SensitiveDataProcessing[flagNo] = 1;
+        expect(isTransmitUfpdConsentDenied(consent)).to.be.true;
+      })
+    });
+
+    ['SharingNotice', 'SensitiveDataLimitUseNotice'].forEach(flag => {
+      it(`should be true (consent denied to add ufpd) without ${flag}`, () => {
+        expect(isTransmitUfpdConsentDenied(mkConsent({
+          [flag]: 2
+        }))).to.be.true;
+      })
+    });
+
+    ['SaleOptOut', 'TargetedAdvertisingOptOut'].forEach(flag => {
+      it(`should be true (consent denied to add ufpd) with ${flag}`, () => {
+        expect(isTransmitUfpdConsentDenied(mkConsent({
+          [flag]: 1
+        }))).to.be.true;
+      })
+    });
+
+    it('should be true (basic consent conditions do not pass) with sensitive opt in but no notice', () => {
+      const cd = mkConsent({
+        SensitiveDataLimitUseNotice: 0
+      });
+      cd.SensitiveDataProcessing[0] = 2;
+      expect(isTransmitUfpdConsentDenied(cd)).to.be.true;
+    });
+
+    it('should deny when sensitive notice is missing', () => {
+      const result = isTransmitUfpdConsentDenied(mkConsent({
+        SensitiveDataLimitUseNotice: 2
+      }));
+      expect(result).to.equal(true);
+    });
+
+    it('should not deny when biometric data opt-out is null', () => {
+      const cd = mkConsent();
+      cd.SensitiveDataProcessing[6] = null;
+      expect(isTransmitUfpdConsentDenied(cd)).to.be.false;
+    })
   });
-})
+
+  describe('isTransmitGeoConsentDenied', () => {
+    function geoConsent(geoOptOut, flags) {
+      const consent = mkConsent(flags);
+      consent.SensitiveDataProcessing[7] = geoOptOut;
+      return consent;
+    }
+    it('should be true (consent denied to add precise geo) -- sensitive flag denied', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(1));
+      expect(result).to.equal(true);
+    });
+    it('should be true (consent denied to add precise geo) -- sensitive data limit usage not given', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(1, {
+        SensitiveDataLimitUseNotice: 0
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be false (consent given to add precise geo) -- sensitive position 8 (index 7) is true', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(2));
+      expect(result).to.equal(false);
+    });
+  })
+});
 
 describe('mspaRule', () => {
   it('does not apply if SID is not applicable', () => {

package/test/spec/modules/adgenerationBidAdapter_spec.js

@@ -184,12 +184,12 @@ describe('AdgenerationAdapter', function () {
       }
     };
     const data = {
-      banner: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=300x250%2C320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&imark=1&tp=https%3A%2F%2Fexample.com`,
-      bannerUSD: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=300x250%2C320x100&currency=USD&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&imark=1&tp=https%3A%2F%2Fexample.com`,
-      native: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=1x1&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&tp=https%3A%2F%2Fexample.com`,
-      bannerWithHyperId: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&imark=1&tp=https%3A%2F%2Fexample.com&hyper_id=novatiqId`,
-      bannerWithAdgextCriteoId: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&adgext_criteo_id=criteo-id-test-1234567890&imark=1&tp=https%3A%2F%2Fexample.com`,
-      bannerWithAdgextIds: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.0&adgext_id5_id=id5-id-test-1234567890&adgext_id5_id_link_type=2&adgext_imuid=i.KrAH6ZAZTJOnH5S4N2sogA&adgext_uid2=%5Bobject%20Object%5D&gpid=%252F1111%252Fhomepage%2523300x250&uach=%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22macOS%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22112%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22112%22%5D%7D%2C%7B%22brand%22%3A%22Not%3AA-Brand%22%2C%22version%22%3A%5B%2299%22%5D%7D%5D%2C%22mobile%22%3A0%7D&schain=%257B%2522ver%2522%253A%25221.0%2522%252C%2522complete%2522%253A1%252C%2522nodes%2522%253A%255B%257B%2522asi%2522%253A%2522indirectseller.com%2522%252C%2522sid%2522%253A%252200001%2522%252C%2522hp%2522%253A1%257D%255D%257D&imark=1&tp=https%3A%2F%2Fexample.com`,
+      banner: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=300x250%2C320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&imark=1&tp=https%3A%2F%2Fexample.com`,
+      bannerUSD: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=300x250%2C320x100&currency=USD&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&imark=1&tp=https%3A%2F%2Fexample.com`,
+      native: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=1x1&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&tp=https%3A%2F%2Fexample.com`,
+      bannerWithHyperId: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&imark=1&tp=https%3A%2F%2Fexample.com&hyper_id=novatiqId`,
+      bannerWithAdgextCriteoId: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&adgext_criteo_id=criteo-id-test-1234567890&imark=1&tp=https%3A%2F%2Fexample.com`,
+      bannerWithAdgextIds: `posall=SSPLOC&id=58278&sdktype=0&hb=true&t=json3&sizes=320x100&currency=JPY&pbver=${prebid.version}&sdkname=prebidjs&adapterver=1.6.1&adgext_id5_id=id5-id-test-1234567890&adgext_id5_id_link_type=2&adgext_imuid=i.KrAH6ZAZTJOnH5S4N2sogA&adgext_uid2=%5Bobject%20Object%5D&gpid=%2F1111%2Fhomepage%23300x250&uach=%7B%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22macOS%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22112%22%5D%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22112%22%5D%7D%2C%7B%22brand%22%3A%22Not%3AA-Brand%22%2C%22version%22%3A%5B%2299%22%5D%7D%5D%2C%22mobile%22%3A0%7D&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22indirectseller.com%22%2C%22sid%22%3A%2200001%22%2C%22hp%22%3A1%7D%5D%7D&imark=1&tp=https%3A%2F%2Fexample.com`,
     };
     it('sends bid request to ENDPOINT via GET', function () {
       const request = spec.buildRequests(bidRequests, bidderRequest)[0];

package/test/spec/modules/appnexusBidAdapter_spec.js

@@ -1093,7 +1093,18 @@ describe('AppNexusAdapter', function () {
       expect(payload.tags[0].use_pmt_rule).to.equal(true);
     });
 
-    it('should add gpid to the request', function () {
+    it('should add preferred gpid to the request', function () {
+      let testGpid = '/12345/my-gpt-tag-0';
+      let bidRequest = deepClone(bidRequests[0]);
+      bidRequest.ortb2Imp = { ext: { gpid: testGpid } };
+
+      const request = spec.buildRequests([bidRequest]);
+      const payload = JSON.parse(request.data);
+
+      expect(payload.tags[0].gpid).to.exist.and.equal(testGpid)
+    });
+
+    it('should add backup gpid to the request', function () {
       let testGpid = '/12345/my-gpt-tag-0';
       let bidRequest = deepClone(bidRequests[0]);
       bidRequest.ortb2Imp = { ext: { data: { pbadslot: testGpid } } };

package/test/spec/modules/criteoBidAdapter_spec.js

@@ -9,11 +9,12 @@ import {
 } from 'modules/criteoBidAdapter.js';
 import * as utils from 'src/utils.js';
 import * as refererDetection from 'src/refererDetection.js';
+import * as ajax from 'src/ajax.js';
 import { config } from '../../../src/config.js';
 import { BANNER, NATIVE, VIDEO } from '../../../src/mediaTypes.js';
 
 describe('The Criteo bidding adapter', function () {
-  let utilsMock, sandbox;
+  let utilsMock, sandbox, ajaxStub;
 
   beforeEach(function () {
     $$PREBID_GLOBAL$$.bidderSettings = {
@@ -26,6 +27,7 @@ describe('The Criteo bidding adapter', function () {
     utilsMock = sinon.mock(utils);
 
     sandbox = sinon.sandbox.create();
+    ajaxStub = sandbox.stub(ajax, 'ajax');
   });
 
   afterEach(function () {
@@ -33,6 +35,7 @@ describe('The Criteo bidding adapter', function () {
     global.Criteo = undefined;
     utilsMock.restore();
     sandbox.restore();
+    ajaxStub.restore();
   });
 
   describe('getUserSyncs', function () {
@@ -56,7 +59,9 @@ describe('The Criteo bidding adapter', function () {
       cookiesAreEnabledStub,
       localStorageIsEnabledStub,
       getCookieStub,
-      getDataFromLocalStorageStub;
+      setCookieStub,
+      getDataFromLocalStorageStub,
+      removeDataFromLocalStorageStub;
 
     beforeEach(function () {
       getConfigStub = sinon.stub(config, 'getConfig');
@@ -75,8 +80,10 @@ describe('The Criteo bidding adapter', function () {
       localStorageIsEnabledStub = sinon.stub(storage, 'localStorageIsEnabled');
       localStorageIsEnabledStub.returns(true);
 
-      getCookieStub = sinon.stub(storage, 'getCookie')
+      getCookieStub = sinon.stub(storage, 'getCookie');
+      setCookieStub = sinon.stub(storage, 'setCookie');
       getDataFromLocalStorageStub = sinon.stub(storage, 'getDataFromLocalStorage');
+      removeDataFromLocalStorageStub = sinon.stub(storage, 'removeDataFromLocalStorage');
     });
 
     afterEach(function () {
@@ -86,7 +93,9 @@ describe('The Criteo bidding adapter', function () {
       cookiesAreEnabledStub.restore();
       localStorageIsEnabledStub.restore();
       getCookieStub.restore();
+      setCookieStub.restore();
       getDataFromLocalStorageStub.restore();
+      removeDataFromLocalStorageStub.restore();
     });
 
     it('should not trigger sync if publisher is using fast bid', function () {
@@ -198,6 +207,25 @@ describe('The Criteo bidding adapter', function () {
         url: `https://gum.criteo.com/syncframe?origin=criteoPrebidAdapter&topUrl=www.abc.com&us_privacy=ABC#${JSON.stringify(expectedHash).replace(/"/g, '%22')}`
       }]);
     });
+
+    it('should delete user data when calling onDataDeletionRequest', () => {
+      const cookieData = {
+        'cto_bundle': 'a'
+      };
+      const lsData = {
+        'cto_bundle': 'a'
+      }
+      getCookieStub.callsFake(cookieName => cookieData[cookieName]);
+      setCookieStub.callsFake((cookieName, value, expires) => cookieData[cookieName] = value);
+      removeDataFromLocalStorageStub.callsFake(name => lsData[name] = '');
+      spec.onDataDeletionRequest([]);
+      expect(getCookieStub.calledOnce).to.equal(true);
+      expect(setCookieStub.calledOnce).to.equal(true);
+      expect(removeDataFromLocalStorageStub.calledOnce).to.equal(true);
+      expect(cookieData.cto_bundle).to.equal('');
+      expect(lsData.cto_bundle).to.equal('');
+      expect(ajaxStub.calledOnce).to.equal(true);
+    });
   });
 
   describe('isBidRequestValid', function () {

package/test/spec/modules/cwireBidAdapter_spec.js

@@ -293,4 +293,51 @@ describe('C-WIRE bid adapter', () => {
       expect(bids[0].ad).to.exist;
     })
   });
+
+  describe('add user-syncs', function () {
+    it('empty user-syncs if no consent given', function () {
+      const userSyncs = spec.getUserSyncs({}, {}, {}, {});
+
+      expect(userSyncs).to.be.empty
+    })
+    it('empty user-syncs if no syncOption enabled', function () {
+      let gdprConsent = {
+        vendorData: {
+          purpose: {
+            consents: 1
+          }
+        }};
+      const userSyncs = spec.getUserSyncs({}, {}, gdprConsent, {});
+
+      expect(userSyncs).to.be.empty
+    })
+
+    it('user-syncs with enabled pixel option', function () {
+      let gdprConsent = {
+        vendorData: {
+          purpose: {
+            consents: 1
+          }
+        }};
+      let synOptions = {pixelEnabled: true, iframeEnabled: true};
+      const userSyncs = spec.getUserSyncs(synOptions, {}, gdprConsent, {});
+
+      expect(userSyncs[0].type).to.equal('image');
+      expect(userSyncs[0].url).to.equal('https://ib.adnxs.com/getuid?https://prebid.cwi.re/v1/cookiesync?xandrId=$UID');
+    })
+
+    it('user-syncs with enabled iframe option', function () {
+      let gdprConsent = {
+        vendorData: {
+          purpose: {
+            consents: 1
+          }
+        }};
+      let synOptions = {iframeEnabled: true};
+      const userSyncs = spec.getUserSyncs(synOptions, {}, gdprConsent, {});
+
+      expect(userSyncs[0].type).to.equal('iframe');
+      expect(userSyncs[0].url).to.equal('https://ib.adnxs.com/getuid?https://prebid.cwi.re/v1/cookiesync?xandrId=$UID');
+    })
+  })
 });

package/test/spec/modules/newspassidBidAdapter_spec.js

@@ -1667,6 +1667,12 @@ describe('newspassid Adapter', function () {
       expect(result[0]['price']).to.equal(0.9);
       expect(result[0]['adserverTargeting']['np_npappnexus_adId']).to.equal('2899ec066a91ff8-0-np-1');
     });
+    it('should add np_auc_id (response id value)', function () {
+      const request = spec.buildRequests(validBidRequests, validBidderRequest);
+      let validres = JSON.parse(JSON.stringify(validBidResponse1adWith2Bidders));
+      const result = spec.interpretResponse(validres, request);
+      expect(utils.deepAccess(result[0].adserverTargeting, 'np_auc_id')).to.equal(validBidResponse1adWith2Bidders.body.id);
+    });
     it('should correctly process an auction with 2 adunits & multiple bidders one of which bids for both adslots', function() {
       let validres = JSON.parse(JSON.stringify(multiResponse1));
       let request = spec.buildRequests(multiRequest1, multiBidderRequest1.bidderRequest);