Brancher votre CMP sur TrustRGPD

Navigateur                    Votre serveur                  TrustRGPD
─────────                     ─────────────                  ─────────
CMP : consentement modifié
   │  sendConsentProof(state)
   ▼
POST /consent-proof  ───────►  reçoit l'état + résout
(sans clé, first-party)        un user_identifier stable
                                  │  ajoute Authorization: Bearer <clé>
                                  ▼
                              POST https://trustrgpd.newfutur.com/api/v1/log  ───►  201 Created
                                                                                    (preuve archivée)

// routes/consent-proof.js  —  sur VOTRE serveur
app.post("/consent-proof", express.json({ limit: "16kb" }), function (req, res) {
  var b = req.body || {};
  if (!b.user_identifier) { return res.sendStatus(400); }

  fetch("https://trustrgpd.newfutur.com/api/v1/log", {
    method: "POST",
    headers: {
      "Authorization": "Bearer " + process.env.TRUSTRGPD_API_KEY,  // clé côté serveur uniquement
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      user_identifier: b.user_identifier,
      framework:  b.framework  || "custom",
      consent:    b.consent    || undefined,
      tcf_string: b.tcf_string || undefined,
      gpp_string: b.gpp_string || undefined,
      page_url:   b.page_url   || undefined
    })
  })
  .then(function (r) { res.sendStatus(r.status === 201 ? 204 : 502); })
  .catch(function ()  { res.sendStatus(502); });
});

<?php
// consent-proof.php  —  sur VOTRE serveur
header("Content-Type: application/json");
$in = json_decode(file_get_contents("php://input"), true) ?: [];
if (empty($in["user_identifier"])) { http_response_code(400); exit; }

$payload = json_encode([
  "user_identifier" => $in["user_identifier"],
  "framework"       => $in["framework"]   ?? "custom",
  "consent"         => $in["consent"]     ?? null,
  "tcf_string"      => $in["tcf_string"]  ?? null,
  "gpp_string"      => $in["gpp_string"]  ?? null,
  "page_url"        => $in["page_url"]    ?? null,
]);

$ch = curl_init("https://trustrgpd.newfutur.com/api/v1/log");
curl_setopt_array($ch, [
  CURLOPT_POST           => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER     => [
    "Authorization: Bearer " . getenv("TRUSTRGPD_API_KEY"),  // jamais exposée au navigateur
    "Content-Type: application/json",
  ],
  CURLOPT_POSTFIELDS     => $payload,
]);
curl_exec($ch);
$code = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
http_response_code($code === 201 ? 204 : 502);

/* /assets/consent-proof.js  —  sur VOTRE domaine */
(function (w, d) {
  var ENDPOINT = "/consent-proof";   // la route de l'étape 2
  var last = null;

  function stableUserId() {
    // 1) utilisateur connecté : renvoyez votre identifiant interne (déjà pseudonyme)
    if (w.APP && w.APP.userId) { return "u:" + w.APP.userId; }
    // 2) sinon : identifiant first-party persistant, non nominatif
    var m = d.cookie.match(/(?:^|;\s*)trg_uid=([^;]+)/);
    if (m) { return decodeURIComponent(m[1]); }
    var id = (w.crypto && w.crypto.randomUUID)
      ? w.crypto.randomUUID()
      : "a" + Date.now().toString(16) + Math.random().toString(16).slice(2);
    d.cookie = "trg_uid=" + encodeURIComponent(id) + ";path=/;max-age=31536000;SameSite=Lax";
    return id;
  }

  w.sendConsentProof = function (state) {
    state = state || {};
    var body = JSON.stringify({
      user_identifier: stableUserId(),
      page_url: location.href,
      framework: state.framework || "custom",
      consent: state.consent || undefined,
      tcf_string: state.tcf_string || undefined,
      gpp_string: state.gpp_string || undefined
    });
    if (body === last) { return; }   // rien de neuf depuis le dernier envoi
    last = body;

    if (navigator.sendBeacon) {
      navigator.sendBeacon(ENDPOINT, new Blob([body], { type: "application/json" }));
    } else {
      fetch(ENDPOINT, {
        method: "POST", headers: { "Content-Type": "application/json" },
        body: body, keepalive: true
      }).catch(function () {});
    }
  };
})(window, document);

(function () {
  var dl = window.dataLayer = window.dataLayer || [];
  var push = dl.push;
  dl.push = function () {
    var r = push.apply(dl, arguments);
    for (var i = 0; i < arguments.length; i++) {
      var a = arguments[i];
      if (a && a[0] === "consent" && (a[1] === "update" || a[1] === "default")) {
        var g = a[2] || {};
        window.sendConsentProof({
          framework: "consent_mode_v2",
          consent: {
            ad_storage:              g.ad_storage,
            ad_user_data:            g.ad_user_data,
            ad_personalization:      g.ad_personalization,
            analytics_storage:       g.analytics_storage,
            functionality_storage:   g.functionality_storage,
            personalization_storage: g.personalization_storage,
            security_storage:        g.security_storage
          }
        });
      }
    }
    return r;
  };
})();

function onetrustToProof() {
  var g = "," + (window.OnetrustActiveGroups || "") + ",";
  var has = function (id) { return g.indexOf("," + id + ",") !== -1; };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:      "granted",                       // C0001 strictement nécessaires
      analytics_storage:     has("C0002") ? "granted" : "denied",  // performance
      functionality_storage: has("C0003") ? "granted" : "denied",  // fonctionnels
      personalization_storage: has("C0003") ? "granted" : "denied",
      ad_storage:            has("C0004") ? "granted" : "denied",   // publicité / ciblage
      ad_user_data:          has("C0004") ? "granted" : "denied",
      ad_personalization:    has("C0004") ? "granted" : "denied"
    }
  });
}

// à chaque changement + au chargement
window.addEventListener("consent.onetrust", onetrustToProof);   // certaines versions
if (window.OneTrust && OneTrust.OnConsentChanged) { OneTrust.OnConsentChanged(onetrustToProof); }
window.OptanonWrapper = function () { onetrustToProof(); };

function cookiebotToProof() {
  var c = (window.Cookiebot && window.Cookiebot.consent) || {};
  var yn = function (b) { return b ? "granted" : "denied"; };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:        "granted",
      functionality_storage:   yn(c.preferences),
      personalization_storage: yn(c.preferences),
      analytics_storage:       yn(c.statistics),
      ad_storage:              yn(c.marketing),
      ad_user_data:            yn(c.marketing),
      ad_personalization:      yn(c.marketing)
    }
  });
}

window.addEventListener("CookiebotOnConsentReady", cookiebotToProof);
window.addEventListener("CookiebotOnAccept",       cookiebotToProof);
window.addEventListener("CookiebotOnDecline",      cookiebotToProof);

function usercentricsToProof() {
  if (!window.UC_UI || !UC_UI.getServicesBaseInfo) { return; }
  var svc = UC_UI.getServicesBaseInfo();               // [{ name, consent: { status } }, ...]
  var on = function (needle) {
    return svc.some(function (s) {
      return s.name && s.name.toLowerCase().indexOf(needle) !== -1 && s.consent && s.consent.status;
    }) ? "granted" : "denied";
  };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:    "granted",
      analytics_storage:   on("analytics"),
      ad_storage:          on("ads"),
      ad_user_data:        on("ads"),
      ad_personalization:  on("ads")
    }
  });
}

window.addEventListener("ucEvent", function (e) {
  if (e.detail && (e.detail.event === "consent_status" || e.detail.action === "onUpdateServices")) {
    usercentricsToProof();
  }
});
// nouvelle API : window.__ucCmp && __ucCmp.getConsentDetails().then(...)

window.didomiOnReady = window.didomiOnReady || [];
window.didomiOnReady.push(function (Didomi) {

  function didomiToProof() {
    var s = Didomi.getUserConsentStatusForAll();      // { purposes: { enabled: [...], disabled: [...] } }
    var on = function (id) { return s.purposes.enabled.indexOf(id) !== -1 ? "granted" : "denied"; };
    window.sendConsentProof({
      framework: "tcf_v2_2",
      tcf_string: Didomi.getUserConsentString() || undefined,
      consent: {
        security_storage:   "granted",
        analytics_storage:  on("analytics"),           // ids selon votre config Didomi
        ad_storage:         on("advertising"),
        ad_user_data:       on("advertising"),
        ad_personalization: on("advertising")
      }
    });
  }

  Didomi.on("consent.changed", didomiToProof);
  didomiToProof();                                     // état initial
});

window._axcb = window._axcb || [];
window._axcb.push(function (axeptio) {

  function axeptioToProof(choices) {
    choices = choices || {};
    var yn = function (v) { return v ? "granted" : "denied"; };
    window.sendConsentProof({
      framework: "consent_mode_v2",
      consent: {
        security_storage:   "granted",
        analytics_storage:  yn(choices.google_analytics || choices.matomo),
        ad_storage:         yn(choices.google_ads || choices.facebook_pixel),
        ad_user_data:       yn(choices.google_ads || choices.facebook_pixel),
        ad_personalization: yn(choices.google_ads || choices.facebook_pixel)
      }
    });
  }

  axeptio.on("cookies:complete", axeptioToProof);
  axeptio.on("consent:updated",  axeptioToProof);
});

function cookiehubToProof() {
  var ok = function (cat) {
    return window.cookiehub && cookiehub.hasConsented(cat) ? "granted" : "denied";
  };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:        "granted",
      functionality_storage:   ok("preferences"),
      personalization_storage: ok("preferences"),
      analytics_storage:       ok("analytics"),
      ad_storage:              ok("marketing"),
      ad_user_data:            ok("marketing"),
      ad_personalization:      ok("marketing")
    }
  });
}

var cpm = window.cpm || {};
cpm.onInitialise  = cookiehubToProof;
cpm.onStatusChange = cookiehubToProof;
cpm.onAllow  = cookiehubToProof;
cpm.onRevoke = cookiehubToProof;
window.cookiehub && window.cookiehub.load(cpm);

function enzuzoToProof(prefs) {
  prefs = prefs || (window.__ENZUZO_PREFS__ || {});
  var yn = function (v) { return v ? "granted" : "denied"; };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:        "granted",
      functionality_storage:   yn(prefs.functional || prefs.preferences),
      analytics_storage:       yn(prefs.analytics),
      ad_storage:              yn(prefs.marketing || prefs.advertising),
      ad_user_data:            yn(prefs.marketing || prefs.advertising),
      ad_personalization:      yn(prefs.marketing || prefs.advertising)
    }
  });
}

// évènement natif (le nom exact peut varier selon la version Enzuzo)
window.addEventListener("enzuzo-consent-updated", function (e) { enzuzoToProof(e.detail); });

function piwikProToProof() {
  window.ppms.cm.api("getComplianceSettings", function (s) {
    var c = (s && s.consents) || {};
    var st = function (k) { return c[k] && c[k].status === 1 ? "granted" : "denied"; };
    window.sendConsentProof({
      framework: "consent_mode_v2",
      consent: {
        security_storage:   "granted",
        analytics_storage:  st("analytics"),
        ad_storage:         st("remarketing"),
        ad_user_data:       st("conversion_tracking"),
        ad_personalization: st("ab_testing_and_personalization")
      }
    });
  });
}

window._paq = window._paq || [];
window.ppms = window.ppms || { cm: { api: function () { (ppms.cm.pending = ppms.cm.pending || []).push(arguments); } } };
window.ppms.cm.api("subscribeConsentUpdated", piwikProToProof);
window.ppms.cm.api("getUserId", piwikProToProof);   // déclenche aussi une première lecture

function commandersActToProof() {
  if (!window.tC || !tC.privacy || !tC.privacy.getOptin) { return; }
  var o = tC.privacy.getOptin() || {};
  var cat = o.categories || {};
  var yn = function (id) { return cat[id] ? "granted" : "denied"; };
  window.sendConsentProof({
    framework: "consent_mode_v2",
    consent: {
      security_storage:   "granted",
      analytics_storage:  yn("2"),    // remplacez par vos ids de catégories Commanders Act
      ad_storage:         yn("3"),
      ad_user_data:       yn("3"),
      ad_personalization: yn("3")
    }
  });
}

window.addEventListener("tc_privacy_change", commandersActToProof);
document.addEventListener("consent.onLoad", commandersActToProof);