fix: refactor setup (#1152)

* add setup steps

* refactoring

* omitempty

* cleanup

* fixes

internal/v2/command/setup_step9.go

@@ -0,0 +1,50 @@
+package command
+
+import (
+	"context"
+
+	iam_model "github.com/caos/zitadel/internal/iam/model"
+	"github.com/caos/zitadel/internal/v2/domain"
+	iam_repo "github.com/caos/zitadel/internal/v2/repository/iam"
+)
+
+type Step9 struct {
+	Passwordless bool
+}
+
+func (s *Step9) Step() domain.Step {
+	return domain.Step9
+}
+
+func (s *Step9) execute(ctx context.Context, commandSide *CommandSide) error {
+	return commandSide.SetupStep9(ctx, s)
+}
+
+func (r *CommandSide) SetupStep9(ctx context.Context, step *Step9) error {
+	fn := func(iam *IAMWriteModel) (*iam_repo.Aggregate, error) {
+		multiFactorModel := NewIAMMultiFactorWriteModel(iam.AggregateID)
+		iamAgg := IAMAggregateFromWriteModel(&multiFactorModel.MultiFactoryWriteModel.WriteModel)
+		if !step.Passwordless {
+			return iamAgg, nil
+		}
+		err := setPasswordlessAllowedInPolicy(ctx, r, iamAgg)
+		if err != nil {
+			return nil, err
+		}
+		err = r.addMultiFactorToDefaultLoginPolicy(ctx, iamAgg, multiFactorModel, iam_model.MultiFactorTypeU2FWithPIN)
+		if err != nil {
+			return nil, err
+		}
+		return iamAgg, err
+	}
+	return r.setup(ctx, step, fn)
+}
+
+func setPasswordlessAllowedInPolicy(ctx context.Context, c *CommandSide, iamAgg *iam_repo.Aggregate) error {
+	policy, err := c.GetDefaultLoginPolicy(ctx)
+	if err != nil {
+		return err
+	}
+	policy.PasswordlessType = domain.PasswordlessTypeAllowed
+	return c.changeDefaultLoginPolicy(ctx, iamAgg, NewIAMLoginPolicyWriteModel(iamAgg.ID()), policy)
+}