User ID may use stale USP/GPP consent

[dgirardi]

Type of issue

Bug

Description

The user ID module has some logic to skip UID refresh when TCF consent data has not changed since the last retrieval:

Prebid.js/modules/userId/index.js

Lines 829 to 830 in c281fc7

	if (!storedId || refreshNeeded || forceRefresh || !storedConsentDataMatchesConsentData(storedConsentData, consentData)) {
	// No id previously saved, or a refresh is needed, or consent has changed. Request a new id from the submodule.

The logic does not look at GPP or USP - just TCF. Currently, prebid may continue to use user IDs that were retrieved using GPP/USP consent that was later invalidated.

[patmmccann]

solution may also fix #6433