feat: Privacy policy (#1957)

* feat: command side privacy policy

* feat: add privacy policy to api

* feat: add privacy policy query side

* fix: add privacy policy to mgmt api

* fix: add privacy policy to auth and base data

* feat: use privacyPolicy in login gui

* feat: use privacyPolicy in login gui

* feat: test org fatures

* feat: typos

* feat: tos in register

internal/ui/login/handler/privacy_policy_handler.go

@@ -0,0 +1,15 @@
+package handler
+
+import (
+	"net/http"
+
+	iam_model "github.com/caos/zitadel/internal/iam/model"
+)
+
+func (l *Login) getDefaultPrivacyPolicy(r *http.Request) (*iam_model.PrivacyPolicyView, error) {
+	policy, err := l.authRepo.GetDefaultPrivacyPolicy(r.Context())
+	if err != nil {
+		return nil, err
+	}
+	return policy, nil
+}

internal/ui/login/handler/renderer.go

@@ -321,8 +321,19 @@ func (l *Login) getBaseData(r *http.Request, authReq *domain.AuthRequest, title
 		baseData.LoginPolicy = authReq.LoginPolicy
 		baseData.LabelPolicy = authReq.LabelPolicy
 		baseData.IDPProviders = authReq.AllowedExternalIDPs
+		if authReq.PrivacyPolicy != nil {
+			baseData.TOSLink = authReq.PrivacyPolicy.TOSLink
+			baseData.PrivacyLink = authReq.PrivacyPolicy.PrivacyLink
+		}
 	} else {
-		//TODO: How to handle LabelPolicy if no auth req (eg Register)
+		privacyPolicy, err := l.getDefaultPrivacyPolicy(r)
+		if err != nil {
+			return baseData
+		}
+		if privacyPolicy != nil {
+			baseData.TOSLink = privacyPolicy.TOSLink
+			baseData.PrivacyLink = privacyPolicy.PrivacyLink
+		}
 	}
 	return baseData
 }
@@ -405,7 +416,6 @@ func (l *Login) isDisplayLoginNameSuffix(authReq *domain.AuthRequest) bool {
 	}
 	return authReq.LabelPolicy != nil && !authReq.LabelPolicy.HideLoginNameSuffix
 }
-
 func getRequestID(authReq *domain.AuthRequest, r *http.Request) string {
 	if authReq != nil {
 		return authReq.ID
@@ -437,6 +447,8 @@ type baseData struct {
 	OrgName                string
 	PrimaryDomain          string
 	DisplayLoginNameSuffix bool
+	TOSLink                string
+	PrivacyLink            string
 	AuthReqID              string
 	CSRF                   template.HTML
 	Nonce                  string