Added consent gating to the Advertising component to ensure no advertising cookies are written before user consent is resolved. (#1442)

* fix functional tests
updated the skipped tests for helper.js
in componentRegistered hook , for viewthru : return promise for click thru advertising call , for viewthru case fire and forget
Add timestamp in payload of enrichment calls

* click thru check -> either one of ef_id or s_kwcid param present

* build trigger

* build trigger

* build trigger

* build trigger

* consent bug fix : advertising component

* Remove sandbox file changes from branch

* Remove unrelated files from branch - keep only consent changes

* feat(Advertising): gate click cookie write on consent

Move LAST_CLICK_COOKIE_KEY cookie write from clickThroughHandler into
createAdConversionHandler.trackAdConversion(), after consent.awaitConsent()
resolves. This ensures no ad-tracking cookies (skwcid/efid) are set
without user consent.

Changes:
- clickThroughHandler: removed pre-consent LAST_CLICK_COOKIE_KEY write,
  pass skwcid/efid through to trackAdConversion()
- createAdConversionHandler: accept cookieManager, write click cookie
  only after consent is granted
- index.js: pass cookieManager to createAdConversionHandler (1-line change)

* consent case for onbefore send event

* consent case for onbefore send event

* add changeset for advertising consent gate

Author: adhir111

.changeset/advertising-consent-gate.md

@@ -0,0 +1,6 @@
+---
+"@adobe/alloy": patch
+---
+
+Added consent gating to the Advertising component to ensure no advertising cookies are written before user consent is resolved.
+

packages/core/src/components/Advertising/createComponent.js

@@ -42,6 +42,12 @@ export default ({
         sendAdConversionHandler();
       },
       onBeforeEvent: ({ event, advertising = {} }) => {
+        const { state } = consent.current();
+        if (state !== "in") {
+          // Consent not yet granted — skip advertising ID resolution
+          // but don't block the sendEvent call.
+          return;
+        }
         return handleOnBeforeSendEvent({
           cookieManager,
           logger,

packages/core/test/unit/specs/components/Advertising/createComponent.spec.js

@@ -74,6 +74,7 @@ describe("Advertising::createComponent", () => {
 
     consent = {
       awaitConsent: vi.fn().mockResolvedValue(),
+      current: vi.fn().mockReturnValue({ state: "in", wasSet: true }),
     };
 
     // Reset mocks
@@ -143,6 +144,26 @@ describe("Advertising::createComponent", () => {
     });
   });
 
+  it("should skip onBeforeSendEvent when consent is out", async () => {
+    consent.current.mockReturnValue({ state: "out", wasSet: true });
+
+    const event = { mergeQuery: vi.fn() };
+
+    await component.lifecycle.onBeforeEvent({ event });
+
+    expect(handleOnBeforeSendEvent).not.toHaveBeenCalled();
+  });
+
+  it("should skip onBeforeSendEvent when consent is pending", async () => {
+    consent.current.mockReturnValue({ state: "pending", wasSet: false });
+
+    const event = { mergeQuery: vi.fn() };
+
+    await component.lifecycle.onBeforeEvent({ event });
+
+    expect(handleOnBeforeSendEvent).not.toHaveBeenCalled();
+  });
+
   it("should maintain shared state across calls", async () => {
     const event = { mergeQuery: vi.fn() };
 

packages/core/test/unit/specs/components/Advertising/utils/helpers.spec.js

@@ -47,6 +47,8 @@ describe("Advertising::helpers", () => {
   let mockLogger;
 
   beforeEach(() => {
+    // Reset modules to clear any cached state
+    vi.resetModules();
     // Mock event object
     mockEvent = {
       mergeQuery: vi.fn(),