Remove SF1 (precise geolocation) consent validation for EUID (#2338)

* Remove SF1 (precise geolocation) consent validation for EUID

The Special Feature 1 validation was a legacy requirement that is no longer needed. This change allows EUID token generation for users who have the required TCF purpose consents but don't have SF1
(precise geolocation) enabled.

Resolves: UID2-6532
Co-authored-by: Cursor <cursoragent@cursor.com>

* Add test to verify consent passes when PreciseGeolocation special feature is missing

Ensures TCF consent validation does not require SF1 (PreciseGeolocationData) opt-in.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Removed TransparentConsentSpecialFeature.java

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sunnywu

src/main/java/com/uid2/operator/privacy/tcf/TransparentConsent.java

@@ -39,8 +39,4 @@ public boolean hasConsent(int vendorId, TransparentConsentPurpose ... purposes)
                 .reduce(0, (f, x) -> (f | (1 << x))) 
                 & requiredBits) == requiredBits;
     }
-
-    public boolean hasSpecialFeature(TransparentConsentSpecialFeature feature) {
-        return this.tcString.getSpecialFeatureOptIns().contains(feature.value);
-    }
 }

src/main/java/com/uid2/operator/privacy/tcf/TransparentConsentSpecialFeature.java

@@ -12,7 +12,6 @@
 import com.uid2.operator.privacy.tcf.TransparentConsent;
 import com.uid2.operator.privacy.tcf.TransparentConsentParseResult;
 import com.uid2.operator.privacy.tcf.TransparentConsentPurpose;
-import com.uid2.operator.privacy.tcf.TransparentConsentSpecialFeature;
 import com.uid2.operator.service.*;
 import com.uid2.operator.store.*;
 import com.uid2.operator.store.IConfigStore;
@@ -1632,9 +1631,7 @@ private UserConsentStatus validateUserConsent(JsonObject req, String apiContact)
                     TransparentConsentPurpose.MEASURE_AD_PERFORMANCE,           // 7
                     TransparentConsentPurpose.DEVELOP_AND_IMPROVE_PRODUCTS      // 10
             );
-            final boolean allowPreciseGeo = tcResult.getTCString().hasSpecialFeature(TransparentConsentSpecialFeature.PreciseGeolocationData);
-
-            if (!userConsent || !allowPreciseGeo) {
+            if (!userConsent) {
                 return UserConsentStatus.INSUFFICIENT;
             }
         }

src/main/java/com/uid2/operator/vertx/UIDOperatorVerticle.java

@@ -2,13 +2,17 @@
 
 import org.junit.jupiter.api.Test;
 
+import com.iabtcf.encoder.TCStringEncoder;
+import com.iabtcf.utils.BitSetIntIterable;
 import com.uid2.operator.model.IdentityScope;
 import com.uid2.shared.auth.Role;
 
 import io.vertx.core.Vertx;
 import io.vertx.core.json.JsonObject;
 import io.vertx.junit5.VertxTestContext;
 
+import java.time.Instant;
+
 import static org.junit.jupiter.api.Assertions.*;
 
 class EUIDOperatorVerticleTest extends UIDOperatorVerticleTest {
@@ -75,5 +79,54 @@ void noContentOnInsufficientTcfConsent(Vertx vertx, VertxTestContext testContext
             testContext.completeNow();
         });
     }
+
+    @Test
+    void consentPassesWhenPreciseGeolocationSpecialFeatureIsMissing(Vertx vertx, VertxTestContext testContext) {
+        final int clientSiteId = 201;
+        fakeAuth(clientSiteId, Role.GENERATOR);
+        setupSalts();
+        setupKeys();
+
+        final String emailAddress = "test@uid2.com";
+        final JsonObject v2Payload = new JsonObject();
+        v2Payload.put("email", emailAddress);
+        // TCF string with all required purposes but WITHOUT PreciseGeolocation special feature (feature 1)
+        String tcfStringWithoutPreciseGeolocation = createTcfConsentString(
+                new int[] { 21 },           // vendor consent
+                new int[] { 21 },           // vendor LI
+                new int[] { 1, 3, 4 },      // purpose consents (1, 3, 4)
+                new int[] { 2, 7, 10 },     // purpose LI (2, 7, 10)
+                new int[] {}                // NO special features - PreciseGeolocation (1) is missing
+        );
+        v2Payload.put("tcf_consent_string", tcfStringWithoutPreciseGeolocation);
+        sendTokenGenerate(vertx, v2Payload, 200, json -> {
+            assertTrue(json.containsKey("body"));
+            assertEquals("success", json.getString("status"));
+            testContext.completeNow();
+        });
+    }
+
+    private String createTcfConsentString(int[] vendorConsent, int[] vendorLI, int[] purposesConsent, int[] purposesLI, int[] specialFeatureOptIns) {
+        return TCStringEncoder.newBuilder()
+                .version(2)
+                .created(Instant.now())
+                .lastUpdated(Instant.now())
+                .cmpId(1)
+                .cmpVersion(12)
+                .consentScreen(1)
+                .consentLanguage("FR")
+                .vendorListVersion(2)
+                .tcfPolicyVersion(1)
+                .isServiceSpecific(true)
+                .useNonStandardStacks(false)
+                .addSpecialFeatureOptIns(BitSetIntIterable.from(specialFeatureOptIns))
+                .publisherCC("DE")
+                .addVendorConsent(BitSetIntIterable.from(vendorConsent))
+                .addVendorLegitimateInterest(BitSetIntIterable.from(vendorLI))
+                .purposeOneTreatment(true)
+                .addPurposesConsent(BitSetIntIterable.from(purposesConsent))
+                .addPurposesLITransparency(BitSetIntIterable.from(purposesLI))
+                .encode();
+    }
 }