feat: setup and iam commands (#99)

* start org

* refactor(eventstore): filter in sql for querier

* feat(eventstore): Aggregate precondition

preconditions are checked right before insert. Insert is still transaction save

* feat(eventstore): check preconditions in repository

* test(eventstore): test precondition in models

* test(eventstore): precondition-tests

* start org

* refactor(eventstore): filter in sql for querier

* feat(eventstore): Aggregate precondition

preconditions are checked right before insert. Insert is still transaction save

* feat(admin): start implement org

* feat(eventstore): check preconditions in repository

* fix(eventstore): data as NULL if empty
refactor(eventstore): naming in sequence methods

* feat(admin): org command side

* feat(management): start org-repo

* feat(org): member

* fix: replace ObjectRoot.ID with ObjectRoot.AggregateID

* aggregateID

* add remove,change member

* refactor(org): namings

* refactor(eventstore): querier as type

* fix(precondition): rename validation from precondition to validation

* test(eventstore): isErr func instead of wantErr bool

* fix(tests): Data

* fix(eventstore): correct check for existing events in push,
simplify insert statement

* fix(eventstore): aggregate id public

* test(org): eventsourcing

* test(org): eventstore

* test(org): deactivate, reactivate, orgbyid

* test(org): getMemberByIDs

* tests

* running tests

* add config

* add user repo to admin

* thorw not found if no org found

* iam setup

* eventstore tests done

* setup iam

* lauft

* iam eventstore

* validate if user is already member of org

* modules

* delete unused file

* iam member

* add member validation test

* iam member

* return error if unable to validat member

* generate org id once,
set resourceowner of org

* start iam repo

* set resourceowner on unique aggregates

* setup user const

* better code

* generate files

* fix tests

* Update internal/admin/repository/eventsourcing/repository.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* set ctx data

Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>

cmd/zitadel/system-defaults.yaml

@@ -46,7 +46,7 @@ SystemDefaults:
     Age:
       Description: Standard age policy
       MaxAgeDays: 365
-      ExpireWarnDays: 10 
+      ExpireWarnDays: 10
     Complexity:
       Description: Standard complexity policy
       MinLength: 8
@@ -57,5 +57,50 @@ SystemDefaults:
     Lockout:
       Description: Standard lockout policy
       MaxAttempts: 5
-      ShowLockOutFailures: true        
-
+      ShowLockOutFailures: true
+  IamID: 'IAM'
+  SetUp:
+    GlobalOrg: 'Global'
+    IAMProject: 'Zitadel'
+    Orgs:
+      - Name: 'Global'
+        Domain: 'global.caos.ch'
+        Default: true
+        Users:
+          - FirstName: 'Global Org'
+            LastName: 'Administrator'
+            UserName: 'zitadel-global-org-admin@caos.ch'
+            Email: 'zitadel-global-org-admin@caos.ch'
+            Password: 'Password'
+        Owners:
+          - 'zitadel-global-org-admin@caos.ch'
+      - Name: 'CAOS AG'
+        Domain: 'caos.ch'
+        Users:
+          - FirstName: 'Zitadel'
+            LastName: 'Administrator'
+            UserName: 'zitadel-admin@caos.ch'
+            Email: 'zitadel-admin@caos.ch'
+            Password: 'Password'
+        Owners:
+          - 'zitadel-admin@caos.ch'
+        Projects:
+          - Name: 'Zitadel'
+            OIDCApps:
+              - Name: 'Management-API'
+              - Name: 'Auth-API'
+              - Name: 'Admin-API'
+              - Name: 'Zitadel Console'
+                RedirectUris:
+                  - '$CITADEL_CONSOLE/auth/callback'
+                PostLogoutRedirectUris:
+                  - '$CITADEL_CONSOLE/signedout'
+                ResponseTypes:
+                  - 'CODE'
+                GrantTypes:
+                  - 'AUTHORIZATION_CODE'
+                  - 'IMPLICIT'
+                ApplicationType: 'NATIVE'
+                AuthMethodType: 'AUTH_TYPE_NONE'
+    Owners:
+      - 'zitadel-admin@caos.ch'