Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
react-native-ad-consent
Advanced tools
A wrapper for Google's User Messaging Platform (UMP SDK) and Google's Consent Library.
A wrapper for Google's User Messaging Platform (UMP SDK) and Google's Consent Library.
For React Native versions < 0.60 use version 1.+ of this library and checkout the corresponding README file.
$ yarn add react-native-ad-consent
or
$ npm install react-native-ad-consent
Make sure you have your App ID in your project's Info.plist
. :
+ <key>GADApplicationIdentifier</key>
+ <string>ca-app-pub-3940256099942544~3347511713</string>
</dict>
</plist>
Make sure you have your App ID in your project's AndroidManifest.xml
. :
+ <meta-data android:name="com.google.android.gms.ads.APPLICATION_ID" android:value="ca-app-pub-3940256099942544~3347511713"/>
</application>
import { UMP } from 'react-native-ad-consent'
const {
consentStatus,
consentType,
isConsentFormAvailable,
isRequestLocationInEeaOrUnknown,
} = await UMP.requestConsentInfoUpdate()
if (
isRequestLocationInEeaOrUnknown &&
isConsentFormAvailable &&
consentStatus === UMP.CONSENT_STATUS.REQUIRED
) {
const { consentStatus, consentType } = await UMP.showConsentForm()
}
Name | Value |
---|---|
CONSENT_STATUS.OBTAINED | 3 |
CONSENT_STATUS.NOT_REQUIRED | 2 |
CONSENT_STATUS.REQUIRED | 1 |
CONSENT_STATUS.UNKNOWN | 0 |
CONSENT_TYPE.NON_PERSONALIZED | 2 |
CONSENT_TYPE.PERSONALIZED | 1 |
CONSENT_TYPE.UNKNOWN | 0 |
requestConsentInfoUpdate(): Promise<ConsentInfoUpdate>
type ConsentInfoUpdate = {
consentStatus: number,
consentType: number,
isConsentFormAvailable: boolean,
isRequestLocationInEeaOrUnknown: boolean,
}
Returns the consent information.
showConsentForm(): Promise<ConsentFormResponse>
type ConsentFormResponse = {
consentStatus: number,
consentType: number,
}
Shows the consent form and returns the updated consentStatus and consentType on close.
reset(): void
Resets the consent state.
import RNAdConsent from 'react-native-ad-consent'
// request the consent info update before calling any other method
const consentStatus = await RNAdConsent.requestConsentInfoUpdate({
publisherId: "pub-1234567890",
})
if (consentStatus === RNAdConsent.UNKNOWN) {
const isRequestLocationInEeaOrUnknown = await RNAdConsent.isRequestLocationInEeaOrUnknown()
if (isRequestLocationInEeaOrUnknown) {
const adProviders = await RNAdConsent.getAdProviders()
// do stuff with ad providers, e.g. show a custom consent modal
await RNAdConsent.setConsentStatus(RNAdConsent.PERSONALIZED)
}
}
import RNAdConsent from 'react-native-ad-consent'
// request the consent info update before calling any other method
const consentStatus = await RNAdConsent.requestConsentInfoUpdate({
publisherId: "pub-1234567890",
})
if (consentStatus === RNAdConsent.UNKNOWN) {
const formResponse = await RNAdConsent.showGoogleConsentForm({
privacyPolicyUrl: "https://your-privacy-link.com",
shouldOfferAdFree: true,
})
if (formResponse === RNAdConsent.PREFERS_AD_FREE) {
// do stuff
} else {
await RNAdConsent.setConsentStatus(formResponse)
}
}
Name | Value |
---|---|
NON_PERSONALIZED | "non_personalized" |
PERSONALIZED | "personalized" |
UNKNOWN | "unknown" |
PREFERS_AD_FREE | "prefers_ad_free" |
addTestDevice(deviceId: string): Promise<boolean>
Adds a test device ID. See how to get your ID for ios and Android.
The Consent SDK has different behaviors depending on the value of [...] isRequestLocationInEeaOrUnknown(). For example, the consent form fails to load if the user is not located in the EEA. To enable easier testing of your app both inside and outside the EEA, the Consent SDK supports debug options that you can set prior to calling any other methods in the Consent SDK. source
getAdProviders(): Promise<AdProviderItem[]>
type AdProviderItem = {
id: string,
name: string,
privacyPolicyUrl: string,
}
Returns a list of the ad technology providers associated with the publisher IDs used in your app.
isRequestLocationInEeaOrUnknown(): Promise<boolean>
Returns a boolean indicating if the user's consent is needed.
requestConsentInfoUpdate(config: ConsentInfoConfig): Promise<ConsentStatus>
type ConsentInfoConfig = {
publisherId: string,
}
type ConsentStatus = "non_personalized" | "personalized" | "unknown"
Returns the user's consent status, needs to be called once before any other method is called.
setConsentStatus(status: string): Promise<boolean>
Sets the user's consent choice.
setTagForUnderAgeOfConsent(isUnderAgeOfConsent: boolean): Promise<boolean>
Sets a flag indicating wether the user is under the age of consent.
showGoogleConsentForm(config: ConsentFormObject): Promise<FormResponse>
type ConsentFormObject = {
privacyPolicyUrl: string,
shouldOfferAdFree: boolean,
}
type FormResponse = "non_personalized" | "personalized" | "unknown" | "prefers_ad_free"
Shows a Google-rendered consent form. Returns the user's choice as a string.
You should review the consent text carefully: what appears by default is a message that might be appropriate if you use Google to monetize your app; but we cannot provide legal advice on the consent text that is appropriate for you. source
FAQs
Google's User Messaging Platform (UMP SDK) for React Native.
The npm package react-native-ad-consent receives a total of 186 weekly downloads. As such, react-native-ad-consent popularity was classified as not popular.
We found that react-native-ad-consent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.