Skip to content

Commit 43293b2

Browse files
committed
Merge branch 'main' into gwh-APIDOCS-3690-02-normalization-sydney-phone-example
2 parents ac56bec + 7cad564 commit 43293b2

75 files changed

Lines changed: 510 additions & 468 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.trivyignore

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,3 @@
33
# for more details
44
# e.g.
55
# CVE-2022-3996
6-
7-
# UID2-5271
8-
GHSA-m5qc-5hw7-8vg7 exp:2025-06-04
9-
10-
# UID2-5394
11-
GHSA-f46r-rw29-r322 exp:2025-05-12
12-
13-
# UID2-5395
14-
GHSA-cpj6-fhp6-mr6j exp:2025-05-12
15-
16-
# UID2-6385
17-
CVE-2025-66418 exp:2026-06-15
18-
CVE-2025-66471 exp:2026-06-15

docs/endpoints/post-identity-map.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -176,7 +176,7 @@ For successfully mapped DII, the mapped object includes the properties shown in
176176
|:---------|:-----------|:--------------------------------------------------------------------------------------------------------------------------------------|
177177
| `u` | string | The raw UID2 corresponding to the email or phone number provided in the request. |
178178
| `p` | string | One of the following:<ul><li>If the current raw UID2 was rotated in the last 90 days: the previous raw UID2.</li><li>Otherwise: `null`.</li></ul> |
179-
| `r` | number | The Unix timestamp (in milliseconds) that indicates when the raw UID2 might be refreshed. The raw UID2 is guaranteed to be valid until this timestamp. |
179+
| `r` | number | The Unix timestamp (in milliseconds) that indicates when the raw UID2 might be refreshed. The raw UID2 is valid until this timestamp. |
180180

181181
:::note
182182
The raw UID2 does not change before the refresh timestamp. After the refresh timestamp, remapping the DII returns a new refresh timestamp, but the raw UID2 might or might not change. It is possible for the raw UID2 to remain unchanged for multiple refresh intervals.

docs/getting-started/gs-normalization-encoding.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -194,16 +194,16 @@ You can use this tool to verify that your internal processes are set up to corre
194194

195195
## Troubleshooting
196196

197-
In all scenarios, follow the steps on your side to prepare your DII for processing, and then check your resulting values by using the [UID2 Hashing Tool](#uid2-hashing-tool). If the results don't match, check each step to find the error.
197+
In all scenarios, follow the steps on your side to prepare your DII for processing, and then check your resulting values by using the [UID2 hashing tool](https://hashing-tool.samples.uidapi.com/). If the results don't match, check each step to find the error.
198198

199199
If you're having trouble or getting errors, or if you just want to be sure you're following the steps correctly, here are some things you can check:
200200

201201
- **Phone numbers**: Make sure you're normalizing&#8212;and normalizing correctly&#8212;as the first step.
202202

203203
The service normalizes emails, but it can't normalize phone numbers. For example, it can't determine the value for a missing country code. Use these resources:
204204
- Instructions: [Phone Number Normalization](#phone-number-normalization).
205-
- Tool for cross-checking: [UID2 Hashing Tool](#uid2-hashing-tool).
205+
- Tool for cross-checking: [UID2 hashing tool](https://hashing-tool.samples.uidapi.com/).
206206

207207
- **Use the Base64-encoded value**: The process includes normalizing, then hashing, then Base64-encoding the bytes of the hash value. When generating UID2s, the input is the Base64-encoded value. Make sure you're using this 44-character string value.
208208

209-
- You might see the following error message: "The hashing value must be 44 characters." In this scenario, there is an error with the hashing function you're using. Use the hex to Base64 encoding of the SHA-256 hash. For details, see [Email Address Hash Encoding](#email-address-hash-encoding) or [Phone Number Hash Encoding](#phone-number-hash-encoding). To cross-check, test using the [UID2 Hashing Tool](#uid2-hashing-tool).
209+
- You might see the following error message: "The hashing value must be 44 characters." In this scenario, there is an error with the hashing function you're using. Use the hex to Base64 encoding of the SHA-256 hash. For details, see [Email Address Hash Encoding](#email-address-hash-encoding) or [Phone Number Hash Encoding](#phone-number-hash-encoding). To cross-check, test using the [UID2 hashing tool](https://hashing-tool.samples.uidapi.com/).

docs/guides/operator-guide-aws-marketplace.md

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ import SnptUpgradePolicy from '../snippets/_snpt-private-operator-upgrade-policy
1313
import SnptPreparingEmailsAndPhoneNumbers from '../snippets/_snpt-preparing-emails-and-phone-numbers.mdx';
1414
import SnptAttestFailure from '../snippets/_snpt-private-operator-attest-failure.mdx';
1515
import SnptRotatingTheKeys from '../snippets/_snpt-private-operator-rotating-the-keys.mdx';
16+
import SnptRuntimeErrors from '../snippets/_snpt-private-operator-runtime-errors.mdx';
1617

1718
# UID2 Private Operator for AWS Integration Guide
1819

@@ -37,7 +38,7 @@ The latest ZIP file is linked in the Release Notes column in the following table
3738

3839
| Version Name | Version&nbsp;#/Release&nbsp;Notes | AWS Version | Date |
3940
| ------- | ------ | ------ | ------ |
40-
| Q2 2025 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | v5.55.9-r1 | July 1, 2025 |
41+
| Q4 2025 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | v5.62.24-r2 | January 15, 2026 |
4142

4243
:::note
4344
For information about supported versions and deprecation dates, see [Private Operator Versions](../ref-info/deprecation-schedule.md#private-operator-versions).
@@ -371,12 +372,16 @@ The following table includes some additional commands that might help you manage
371372

372373
## UID2 Operator Error Codes
373374

374-
The following table lists errors that might occur during a Private Operator's startup sequence.
375+
The following sections list error codes that might occur during a Private Operator's startup or runtime.
375376

376377
:::note
377-
Error codes for Private Operator startup issues are applicable only to release v5.49.7 and later.
378+
Error codes for Private Operator issues are applicable only to release v5.49.7 and later.
378379
:::
379380

381+
### Startup Errors
382+
383+
The following errors might occur during operator startup:
384+
380385
| Error Code | Issue | Steps to Resolve |
381386
| :--- | :--- | :--- |
382387
| E01 | InstanceProfileMissingError | Attach an IAM instance profile to the EC2 instance with the required permissions. The UID2 Operator needs these permissions to access configurations from AWS Secrets Manager. |
@@ -386,6 +391,12 @@ Error codes for Private Operator startup issues are applicable only to release v
386391
| E05 | OperatorKeyValidationError | Ensure the operator key is correct for the environment and matches the one provided to you. |
387392
| E06 | UID2ServicesUnreachableError | Allow UID2 core and opt-out service IP addresses in the egress firewall. For IP addresses and DNS details, refer to the logs. |
388393

394+
### Runtime Errors
395+
396+
The following errors might occur during operator runtime:
397+
398+
<SnptRuntimeErrors />
399+
389400
## Technical Support
390401

391402
If you have trouble subscribing to the product, or deploying, [contact us](mailto:aws-mktpl-uid@thetradedesk.com).

docs/guides/operator-guide-azure-enclave.md

Lines changed: 15 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ import SnptUpgradePolicy from '../snippets/_snpt-private-operator-upgrade-policy
1313
import SnptPreparingEmailsAndPhoneNumbers from '../snippets/_snpt-preparing-emails-and-phone-numbers.mdx';
1414
import SnptAttestFailure from '../snippets/_snpt-private-operator-attest-failure.mdx';
1515
import SnptRotatingTheKeys from '../snippets/_snpt-private-operator-rotating-the-keys.mdx';
16+
import SnptRuntimeErrors from '../snippets/_snpt-private-operator-runtime-errors.mdx';
1617

1718
# UID2 Private Operator for Azure Integration Guide
1819

@@ -34,7 +35,7 @@ The latest ZIP file is linked in the Azure Download column in the following tabl
3435

3536
| Version Name | Version Number | Release Notes | Azure Download | Date | Deprecation Date |
3637
| ------- | ------ | ------ | ------ | ------ | ------ |
37-
| Q2 2025 | v5.55.9 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | [azure-cc-deployment-files-5.55.9-r1.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.55.9-r1/azure-cc-deployment-files-5.55.9-r1.zip) | July 1, 2025 | July 1, 2026 |
38+
| Q4 2025 | v5.62.24 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | [azure-cc-deployment-files-5.62.24-r2.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.62.24-r2/azure-cc-deployment-files-5.62.24-r2.zip) | January 15, 2026 | January 15, 2027 |
3839

3940
:::note
4041
For information about supported versions and deprecation dates, see [Private Operator Versions](../ref-info/deprecation-schedule.md#private-operator-versions).
@@ -349,17 +350,27 @@ To upgrade, complete the following steps:
349350

350351
## UID2 Operator Error Codes
351352

352-
The following table lists errors that might occur during a Private Operator's startup sequence.
353+
The following sections list error codes that might occur during a Private Operator's startup or runtime.
353354

354355
:::note
355-
Error codes for Private Operator startup issues are applicable only to release v5.49.7 and later.
356+
Error codes for Private Operator issues are applicable only to release v5.49.7 and later.
356357
:::
357358

359+
### Startup Errors
360+
361+
The following errors might occur during operator startup:
362+
358363
| Error Code | Issue | Steps to Resolve |
359364
| :--- | :--- | :--- |
360365
| E02 | OperatorKeyNotFoundError | Make sure that the secret vault and secret name that store the operator key are correctly configured. Make sure they are set as `VAULT_NAME` and `OPERATOR_KEY_SECRET_NAME`. |
361366
| E03 | ConfigurationMissingError | Required attributes are missing in the configuration. Refer to the logs for details and update the missing attributes before running the Azure operator. |
362367
| E04 | ConfigurationValueError | A configuration value is invalid. Verify that the configuration values align with the required format and environment. Note: `debug_mode = true` is allowed only in the `integ` environment. Check the logs for more details. |
363368
| E05 | OperatorKeyValidationError | Ensure the operator key is correct for the environment and matches the one provided to you. |
364369
| E06 | UID2ServicesUnreachableError | Allow UID2 core and opt-out service IP addresses in the egress firewall. For IP addresses and DNS details, refer to the logs. |
365-
| E08 | OperatorKeyPermissionError | The managed identity (specified via the `operatorIdentifier` parameter) that launches the container must have access to the key vault where the operator key is stored. The value of `operatorIdentifier` must be identical across all configuration JSON files. |
370+
| E08 | OperatorKeyPermissionError | The managed identity (specified via the `operatorIdentifier` parameter) that launches the container must have access to the key vault where the operator key is stored. The value of `operatorIdentifier` must be identical across all configuration JSON files. |
371+
372+
### Runtime Errors
373+
374+
The following errors might occur during operator runtime:
375+
376+
<SnptRuntimeErrors />

docs/guides/operator-private-gcp-confidential-space.md

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ import SnptUpgradePolicy from '../snippets/_snpt-private-operator-upgrade-policy
1313
import SnptPreparingEmailsAndPhoneNumbers from '../snippets/_snpt-preparing-emails-and-phone-numbers.mdx';
1414
import SnptAttestFailure from '../snippets/_snpt-private-operator-attest-failure.mdx';
1515
import SnptRotatingTheKeys from '../snippets/_snpt-private-operator-rotating-the-keys.mdx';
16+
import SnptRuntimeErrors from '../snippets/_snpt-private-operator-runtime-errors.mdx';
1617

1718
# UID2 Private Operator for GCP Integration Guide
1819

@@ -36,7 +37,7 @@ The latest ZIP file is linked in the GCP Download column in the following table.
3637

3738
| Version Name | Version&nbsp;#/Release&nbsp;Notes | GCP Download | Date | Deprecation Date |
3839
| ------- | ------ | ------ | ------ | ------ |
39-
| Q2 2025 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | [gcp-oidc-deployment-files-5.55.9-r1.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.55.9-r1/gcp-oidc-deployment-files-5.55.9-r1.zip) | July 1, 2025 | July 1, 2026 |
40+
| Q4 2025 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | [gcp-oidc-deployment-files-5.62.24-r2.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.62.24-r2/gcp-oidc-deployment-files-5.62.24-r2.zip) | January 15, 2026 | January 15, 2027 |
4041

4142
:::note
4243
For information about supported versions and deprecation dates, see [Private Operator Versions](../ref-info/deprecation-schedule.md#private-operator-versions).
@@ -545,12 +546,16 @@ The Private Operator for GCP exposes [Prometheus-formatted metrics](https://prom
545546
546547
## UID2 Operator Error Codes
547548
548-
The following table lists errors that might occur during a Private Operator's startup sequence.
549+
The following sections list error codes that might occur during a Private Operator's startup or runtime.
549550
550551
:::note
551-
Error codes for Private Operator startup issues are applicable only to release v5.49.7 and later.
552+
Error codes for Private Operator issues are applicable only to release v5.49.7 and later.
552553
:::
553554
555+
### Startup Errors
556+
557+
The following errors might occur during operator startup:
558+
554559
| Error Code | Issue | Steps to Resolve |
555560
| :--- | :--- | :--- |
556561
| E02 | OperatorKeyNotFoundError | Make sure that the secret name specified exists in GCP Secret Manager in the same project as the operator, and that the service account has permission to access the secret. Make sure it's set to: `tee-env-API_TOKEN_SECRET_NAME`. If needed, you can check the logs for the specific secret name. |
@@ -559,3 +564,9 @@ Error codes for Private Operator startup issues are applicable only to release v
559564
| E05 | OperatorKeyValidationError | Ensure the operator key is correct for the environment and matches the one provided to you. |
560565
| E06 | UID2ServicesUnreachableError | Allow UID2 core and opt-out service IP addresses in the egress firewall. For IP addresses and DNS details, refer to the logs. |
561566
| E08 | OperatorKeyPermissionError | Attach a service account to the Compute Engine instance template. The UID2 Operator needs these permissions to access the operator key from the GCP Secret Manager. |
567+
568+
### Runtime Errors
569+
570+
The following errors might occur during operator runtime:
571+
572+
<SnptRuntimeErrors />

docs/ref-info/deprecation-schedule.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,7 @@ The latest ZIP file is available in the Assets section at the bottom of the link
3535

3636
| Version Name | Version&nbsp;#/Release&nbsp;Notes | AWS Version | Date | Deprecation Date |
3737
| ------- | ------ | ------ | ------ | ------ |
38+
| Q4 2025 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | v5.62.24-r2 | January 15, 2026 | January 15, 2027 |
3839
| Q2 2025 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | v5.55.9-r1 | July 1, 2025 | July 1, 2026 |
3940
| Q1 2025 | [v5.49.7](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.49.7) | 5.49.7 | Mar 19, 2025 | Mar 31, 2026 |
4041
| Q3 2024 Out-of-band | [v5.41.0](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.41.0) | 5.41.0 | October 29, 2024 | Mar 31, 2026 |
@@ -49,6 +50,7 @@ The latest ZIP file is linked in the GCP Download column in the following table.
4950

5051
| Version Name | Version&nbsp;#/Release&nbsp;Notes | GCP Download | Date | Deprecation Date |
5152
| ------- | ------ | ------ | ------ | ------ |
53+
| Q4 2025 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | [gcp-oidc-deployment-files-5.62.24-r2.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.62.24-r2/gcp-oidc-deployment-files-5.62.24-r2.zip) | January 15, 2026 | January 15, 2027 |
5254
| Q2 2025 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | [gcp-oidc-deployment-files-5.55.9-r1.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.55.9-r1/gcp-oidc-deployment-files-5.55.9-r1.zip) | July 1, 2025 | July 1, 2026 |
5355
| Q1 2025 | [v5.49.7](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.49.7) | [gcp-oidc-deployment-files-5.49.7.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.49.7/gcp-oidc-deployment-files-5.49.7.zip) | Mar 19, 2025 | Mar 31, 2026 |
5456
| Q3 2024 Out-of-band | [v5.41.0](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.41.0) | [gcp-oidc-deployment-files-5.41.0.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.41.0/gcp-oidc-deployment-files-5.41.0.zip) | October 29, 2024 | Mar 31, 2026 |
@@ -63,6 +65,7 @@ The latest ZIP file is linked in the Azure Download column in the following tabl
6365

6466
| Version Name | Version&nbsp;#/Release&nbsp;Notes | Azure Download | Date | Deprecation Date |
6567
| ------- | ------ | ------ | ------ | ------ |
68+
| Q4 2025 | [v5.62.24](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.62.24-r2) | [azure-cc-deployment-files-5.62.24-r2.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.62.24-r2/azure-cc-deployment-files-5.62.24-r2.zip) | January 15, 2026 | January 15, 2027 |
6669
| Q2 2025 | [v5.55.9](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.55.9-r1) | [azure-cc-deployment-files-5.55.9-r1.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.55.9-r1/azure-cc-deployment-files-5.55.9-r1.zip) | July 1, 2025 | July 1, 2026 |
6770
| Q1 2025 | [v5.49.7](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.49.7) | [azure-cc-deployment-files-5.49.7.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.49.7/azure-cc-deployment-files-5.49.7.zip) | Mar 19, 2025 | Mar 31, 2026 |
6871
| Q3 2024 Out-of-band | [v5.41.0](https://github.com/IABTechLab/uid2-operator/releases/tag/v5.41.0) | [azure-cc-deployment-files-5.41.0.zip](https://github.com/IABTechLab/uid2-operator/releases/download/v5.41.0/azure-cc-deployment-files-5.41.0.zip) | October 29, 2024 | Mar 31, 2026 |

docs/ref-info/glossary-uid.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -402,7 +402,7 @@ import MdxJumpAnchor from '@site/src/components/MdxJumpAnchor';
402402
<dd>For details, see <a href="uid-identifier-types">UID2 Identifier Types</a>.</dd>
403403

404404
<dt><MdxJumpAnchor id="gl-refresh-timestamp"><a href="#gl-refresh-timestamp">Refresh timestamp</a></MdxJumpAnchor></dt>
405-
<dd>In the context of mapping <a href="#gl-dii">DII</a> to raw UID2s, a refresh timestamp is a Unix timestamp (in seconds) returned in the <code>r</code> field of the <a href="../endpoints/post-identity-map">POST&nbsp;/identity/map</a> endpoint response. The raw UID2 is guaranteed to be valid until this timestamp. It is refreshed at some point after this time.</dd>
405+
<dd>In the context of mapping <a href="#gl-dii">DII</a> to raw UID2s, a refresh timestamp is a Unix timestamp (in seconds) returned in the <code>r</code> field of the <a href="../endpoints/post-identity-map">POST&nbsp;/identity/map</a> endpoint response. The raw UID2 is valid until this timestamp. It is refreshed at some point after this time.</dd>
406406
<dd>Use the refresh timestamp to determine when to regenerate raw UID2s for your stored data. We recommend checking for refresh opportunities daily by comparing the current time with the stored refresh timestamps.</dd>
407407

408408
<dt><MdxJumpAnchor id="gl-refresh-token"><a href="#gl-refresh-token">Refresh token</a></MdxJumpAnchor></dt>
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
| Error Code | Issue | How to Identify in Logs | Steps to Resolve |
2+
| :--- | :--- | :--- | :--- |
3+
| E12 | Data Download Failure | Look for log messages containing `E12: Data Download Failure` or `Failed to load` errors from `RotatingStoreVerticle`. These messages include HTTP status codes (for example, `HTTP response code 403`) or exception types (for example, `exception: IOException`). | Check the HTTP status code or exception in the error message and resolve accordingly:<br/>**404 errors**: Verify that the operator key is valid for the environment.<br/>**403 errors**: Verify that the operator key and credentials are correct.<br/>**Timeout errors**: Verify network connectivity, check that firewall/security group settings allow outbound HTTPS (port 443), and ensure that the UID2 service endpoints are accessible.<br/>**500/503 errors**: This code indicates a temporary UID2 service issue. Retry, and if the error persists contact UID2 support. |
4+

0 commit comments

Comments
 (0)