Client and browser EIDs for provider-owned sources after a provider opt-out #1555

Follow-up from PR #1487.

Description

After a provider opt-out clears its sources, a client EID for the same source (from the ts-eids cookie or the /auction body) still reaches bidders. A browser record stored in a provider-owned source is also served indefinitely. PR A filters client copies only by withheld vendor consent.

Reproduction steps

1. Configure an enabled identity provider (fictional example: example-provider, https://id.example.com).
2. Exercise the path described above with a test EC (for example ec-0000-test).
3. Observe the behaviour described.

Expected behavior

Read the row's opt_outs on /auction and page-bids, and drop client EIDs for the sources of an opted-out provider. Expire browser-written records in provider-owned sources.

Acceptance criteria

• /auction and page-bids read the row's opt_outs and drop client EIDs for sources of an opted-out provider.
• Browser-written records in provider-owned sources expire.
• With no providers configured, output is unchanged; tests cover cookie and request-body EIDs.

Affected area

Core (Edge Cookies, GDPR)

Code: crates/trusted-server-core/src/auction/endpoints.rs (drop_vendor_denied_client_eids, merge_auction_eids); publisher.rs (apply_auction_eids_and_device); ec/eids.rs (live_eids).

Version

main with PR #1487 (feat/s2s-eid-after-response).

Review threads

• Collect server-side identity provider EIDs in a single page-load write #1487 (comment)
• Collect server-side identity provider EIDs in a single page-load write #1487 (comment)