Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop 'support-cors' usersync YAML config #4160

Open
bretg opened this issue Jan 17, 2025 · 4 comments
Open

Drop 'support-cors' usersync YAML config #4160

bretg opened this issue Jan 17, 2025 · 4 comments

Comments

@bretg
Copy link
Contributor

bretg commented Jan 17, 2025

Since before even my time in PBS, the YAML files have supported a 'support-cors' field in usersync. Of 230+ bid adapters, only 2 set this to true.

I don't see any code in PBS that looks at this field.

My suspicion is that it's an information flag indicating that the bidder's sync endpoint sets some specific CORS header like Access-Control-Allow-Credentials and/or Access-Control-Allow-Origin. However, That's not documented anywhere and I'm not aware of the use case that drive this ancient config setting.

So I'm proposing that we either:

  • drop support-cors from the usersync YAML entirely
  • OR document what use case it supports and when bidders should declare support-cors:true
@bretg
Copy link
Contributor Author

bretg commented Jan 24, 2025

The cookie_sync endpoint does send this value to the client, but the pbsBidAdapter doesn't use it.

@bsardo
Copy link
Collaborator

bsardo commented Jan 24, 2025

I only see three instances of this in PBS-Go YAML files:
stroeerCore.yaml
imds.yaml
orbidder.yaml

@bretg bretg moved this from Triage to Research in Prebid Server Prioritization Jan 24, 2025
@philipwatson
Copy link
Contributor

Hi @bsardo & @bretg

The stroeerCore.yaml you referenced is some sort of test file that we didn't create or contribute to: config/test/bidder-info-valid/stroeerCore.yaml

The actual yaml file: static/bidder-info/stroeerCore.yaml (no support-cors there).

@arneschulz1984
Copy link
Contributor

arneschulz1984 commented Jan 30, 2025

Dear Prebid-Server Developers, @bretg,

we (Orbidder Developers) had set "supportCORS" to true, because the Sync Endpoint support CORS.
But there is no other spezial behavior than handling an "OPTIONS" request at our implementation.
So from our side it is fine to remove the flag, if there is no need for it.

Greetings
Team Orbidder

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Research
Development

No branches or pull requests

4 participants