Repository navigation

Add design spec for server-side identity providers - #1428

Open

dhruv8sh wants to merge 70 commits into

spec/1246-prebid-eid-fidelityfrom

spec/1246-server-side-identity-providers

Open

Add design spec for server-side identity providers#1428
dhruv8sh wants to merge 70 commits into
spec/1246-prebid-eid-fidelityfrom
spec/1246-server-side-identity-providers

Commits on Oct 21, 2026
- Add spec for server-side identity providers
  dhruv8sh
  committed
  5fd5827
- Merge branch 'spec/1246-prebid-eid-fidelity' into spec/1246-server-side-identity-providers
  dhruv8sh
  committed
  f0f7a17
Commits on Oct 22, 2026
Commits on Oct 23, 2026
- Revise the identity providers spec to revision 12
  dhruv8sh
  committed
  b170c44
Commits on Oct 26, 2026
- Revise the identity providers spec to revision 15 and update the plan
  dhruv8sh
  committed
  e49916f
- Close the spec section 8 gaps in the identity providers plan
  dhruv8sh
  committed
  13920fe
- Add identity cookie lists and a cookie strip by name
  dhruv8sh
  committed
  5c3bd5e
- Strip identity cookies from Prebid Server requests in every mode
  dhruv8sh
  committed
  f0a1e4f
- Strip ID cookies from publisher origin requests
  dhruv8sh
  committed
  f9c5ac2
- Refuse the identity mirror cookie as a template cache key
  dhruv8sh
  committed
  e85225d
- Add the identity module with provider and source ID newtypes
  dhruv8sh
  committed
  2bdf774
- Move the KV schema to version 2 with one record shape
  dhruv8sh
  committed
  e661413
- Restate spec 6.1 size figures in the KvEntry doc comment
  dhruv8sh
  committed
  38fbf52
- Record when browser ingest acquired each ID
  dhruv8sh
  committed
  e15ce97
- Add the identity provider descriptor and its builder
  dhruv8sh
  committed
  27a2c91
- Add declared-input enforcement for identity providers
  dhruv8sh
  committed
  81aad20
- Add provider requests, responses and resolutions
  dhruv8sh
  committed
  6f1c9b1
- Add the IdentityProvider trait
  dhruv8sh
  committed
  8357365
- Evaluate provider consent policies against decoded consent
  dhruv8sh
  committed
  d63697b
- Add record revisions, state revisions and UID hashes
  dhruv8sh
  committed
  ef4e51c
- Filter served KV IDs through one servability check
  dhruv8sh
  committed
  feb30a5
- Add IdentityMutation and its merge into a live identity row
  dhruv8sh
  committed
  de97171
- Add the ts-eids-s mirror payload and its size cap
  dhruv8sh
  committed
  1e8e9e7
- Add the shared identity removal write
  dhruv8sh
  committed
  cafe2e6
- Add [ec.identity] coordinator settings
  dhruv8sh
  committed
  04c56ae
- Add coordinator eligibility and outcome rules
  dhruv8sh
  committed
  518dccc
- Handle a result naming only unclaimed sources as Malformed
  dhruv8sh
  committed
  b0d9ca2
- Add coordinator dispatch with request checks and byte caps
  dhruv8sh
  committed
  2c00529
- Give each dispatched call only its own provider state
  dhruv8sh
  committed
  0c6f2aa
- Model pull sync partners as GenericPullProvider
  dhruv8sh
  committed
  9cc246d
- Decide the writer request once routing allows dispatch
  dhruv8sh
  committed
  273c148
- Test the real-browser gate on proxy EC generation
  dhruv8sh
  committed
  cc068bd
- Stop writing cluster size from /identify
  dhruv8sh
  committed
  33322d0
- Queue browser ingest in the writer's mutation and stop stager writes
  dhruv8sh
  committed
  405abe9
- Return the ts-eids-s mirror from /auction and stop stager ingest
  dhruv8sh
  committed
  ab358b8
- Retry a failed withdrawal tombstone once after send
  dhruv8sh
  committed
  1de9f80
- Clear a withdrawal from the failed list once its retry succeeds
  dhruv8sh
  committed
  8ce81cf
- Merge the server identity set into auction EIDs and apply provider denials
  dhruv8sh
  committed
  98c5434
- Flush identity changes once after send and run pull partners there
  dhruv8sh
  committed
  2c1a32b
- Finalize the response when the reloaded identity runtime is unavailable
  dhruv8sh
  committed
  5cfe152
- Test the one-write-per-page-load invariant end to end
  dhruv8sh
  committed
  a67dca7
- Document the single identity write and the ts-eids-s mirror
  dhruv8sh
  committed
  e8a57e2
- Count the new-EC create write in the identity measurement
  dhruv8sh
  committed
  42dac1b
- Let integrations register identity providers
  dhruv8sh
  committed
  639f9ad
- Keep pull providers when the reload registry fails
  dhruv8sh
  committed
  d7eec83
- Add source ownership and validate identity provider config at deploy
  dhruv8sh
  committed
  0481643
- Decode the GPP opt-outs strict identity policies need
  dhruv8sh
  committed
  977a382
- Fail closed on undecodable GPP US sections
  dhruv8sh
  committed
  8911492
- Add a per-provider circuit breaker on transport failures
  dhruv8sh
  committed
  2669589
- Apply owner precedence and clear provider opt-outs on re-grant
  dhruv8sh
  committed
  ce2247a
- Run hold-mode identity providers before the writer navigation's auction
  dhruv8sh
  committed
  0be0c53
- Make hold dispatch honour call timeouts and fail closed without a limiter
  dhruv8sh
  committed
  a13902f
- Capture identity revocations from proxied provider responses
  dhruv8sh
  committed
  347b682
- Count unreadable-row capture removals as lost and measure capture KV operations
  dhruv8sh
  committed
  a531006
- Write a capture opt-out even when the row view is unreadable
  dhruv8sh
  committed
  0ef5ad4
- Keep batch sync from replacing an owned source's value
  dhruv8sh
  committed
  2dc951a
- Add the provider harness and conformance checks
  dhruv8sh
  committed
  2634026
- Prove complete provider EIDs end to end through a registered provider
  dhruv8sh
  committed
  34d286e
- Document the identity provider framework for operators and authors
  dhruv8sh
  committed
  38f7728
Commits on Oct 27, 2026
- Await hold-mode provider calls inside the request executor
  dhruv8sh
  committed
  1e2ab0e
- Write only registered sources into ts-eids and merge them per source
  dhruv8sh
  committed
  3990a05
- Correct the ownership and harness details in the identity docs
  dhruv8sh
  committed
  270d26c
- Bring the spec and plan in line with the async dispatch and ts-eids merge
  dhruv8sh
  committed
  4133e17
- Fix factual review points in the identity providers spec
  dhruv8sh
  committed
  ee61c7e
- Cover the ts-eids merge edge cases
  dhruv8sh
  committed
  54f4bbe
- Explain why the hold fixture runs inside an executor
  dhruv8sh
  committed
  43613d0
- Strip the query and fragment from the harness page URL
  dhruv8sh
  committed
  ef3a491
- Drop the links to an uncommitted review log
  dhruv8sh
  committed
  dd3b960

Commits

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 26, 2026

Commits on Oct 27, 2026