Enforce opt-out policy check

IABTechLab · Sep 11, 2023 · 1256174 · 1256174
1 parent 013f5bf
commit 1256174
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/src/main/java/com/uid2/operator/model/IdentityMapPolicy.java b/src/main/java/com/uid2/operator/model/IdentityMapPolicy.java
@@ -19,4 +19,8 @@ public static com.uid2.operator.model.IdentityMapPolicy fromValue(int value) {
     public static com.uid2.operator.model.IdentityMapPolicy defaultPolicy() {
         return JustMap;
     }
+
+    public static IdentityMapPolicy respectOptOut() {
+        return RespectOptOut;
+    }
 }
diff --git a/src/main/java/com/uid2/operator/vertx/UIDOperatorVerticle.java b/src/main/java/com/uid2/operator/vertx/UIDOperatorVerticle.java
@@ -780,7 +780,7 @@ private void handleTokenGenerateV2(RoutingContext rc) {
                 if (isAfterCutoffDate(clientKey.getCreated()) && (!req.containsKey(TOKEN_GENERATE_POLICY_PARAM)
                         || TokenGeneratePolicy.fromValue(req.getInteger(TOKEN_GENERATE_POLICY_PARAM)) != TokenGeneratePolicy.respectOptOut())) {
                     LOGGER.error("request body misses opt-out policy argument");
-                    ResponseUtil.ClientError(rc, "request body misses opt-out policy arguments");
+                    ResponseUtil.ClientError(rc, "request body misses opt-out policy argument");
                     return;
                 }
 
@@ -1301,6 +1301,14 @@ private void handleIdentityMapV2(RoutingContext rc) {
                 }
             }
 
+            final ClientKey clientKey = (ClientKey) AuthMiddleware.getAuthClient(rc);
+            if (isAfterCutoffDate(clientKey.getCreated()) && (!requestJsonObject.containsKey(IDENTITY_MAP_POLICY_PARAM)
+                    || IdentityMapPolicy.fromValue(requestJsonObject.getInteger(IDENTITY_MAP_POLICY_PARAM)) != IdentityMapPolicy.respectOptOut())) {
+                LOGGER.error("request body misses opt-out policy argument");
+                ResponseUtil.ClientError(rc, "request body misses opt-out policy argument");
+                return;
+            }
+
             IdentityMapPolicy identityMapPolicy = readIdentityMapPolicy(requestJsonObject);
             recordIdentityMapPolicy(getApiContact(rc), identityMapPolicy);