TCF legitimate interest fields

[allisonking]

Closes #4036

Description Of Changes

This PR sets the legitimate interest fields we had not set before. There are legitimate interest fields for purposes and for vendors.

For purposes, we already know whether they are Consent or Legitimate interest, so we can assign accordingly. We also have to make sure that we never assign to legitimate interest to purposes 1, 3, 4, 5, 6.

Vendors are a little trickier. At first I had some logic to parse through the purposes attached to each vendor and set accordingly. However, the library we use appears to also do some validation here, since the GVL we pass it does list if a vendor has consent or legitimate interest purposes. For example, from the GVL:

{
    "1": {
      "id": 1,
      "name": "Exponential Interactive, Inc d/b/a VDX.tv",
      "purposes": [1, 2, 3, 4, 7, 8, 9, 10],
      "legIntPurposes": [],
      "flexiblePurposes": [7, 8, 9, 10],
      "specialPurposes": [1, 2],
      "features": [1, 2, 3],
      "specialFeatures": [],
      "policyUrl": "https://vdx.tv/privacy/",
      "cookieMaxAgeSeconds": 7776000,
      "usesCookies": true,
      "cookieRefresh": true,
      "usesNonCookieAccess": false,
      "deviceStorageDisclosureUrl": "https://vdxtv.expo.workers.dev"
    }
}

So even if I try to set tcModel.vendorLegitimateInterests.set(1), the library doesn't propagate it because it knows that vendor doesn't have any legIntPurposes`!

This becomes tricky with our data map as a source of truth, since somebody could feasibly set a system that disagrees with the GVL (for instance, if they set Exponential Interactive to have legitimate purposes) and then the library we use rejects it. It does seem like the GVL would be more accurate in this case, though I'm not sure about that. I did add a check to make sure we didn't set any legints that we shouldn't be

Code Changes

• Add logic to set purpose and vendor legitimate interests
  • Cypress tests for this
• Fixed logic for rendering the banner which wasn't quite right (it wouldn't pop up if there was a new preference to save to)
  • Cypress test for this

Steps to Confirm

For purposes

• In the admin-ui, add a system with consent data uses and legitimate interest data uses. Refer to this GVL to data use mapping for data uses : purposes.
  • You can set a forbidden one too, for instance if you set marketing.advertising.first_party.targeted to LegInt
• Install the IAB's TCF validator chrome extension to easily see the values
• Run fides and enable tcf via consent-settings
• Run fides-js via the privacy center with TCF enabled environment var
• When you save, you should see legitimate interests populate per how you added them to the system. However, if you added a legint on a data use that isn't allowed, then it won't populate.

For vendors

• You'll need vendors that have GVL vendor IDs, instructions for that here. You should consult the GVL to check what consent/legints the vendors you are adding have.
• If the vendor you add only has "consent" purposes, then when you opt in, you should only see a ✅ in the "Vendor (consents)" section
• If the vendor you add only has "legitimate interest" purposes, then when you opt in, you should only see a ✅ in the "Vendor (legitimate interest)" section
• If it has both, you should get a ✅ in both sections
• Note that you'll get this regardless of the purposes in the data map, since the library uses the GVL as the source of truth!

Pre-Merge Checklist

• All CI Pipelines Succeeded
• Issue Requirements are Met
• Update CHANGELOG.md

[cypress]

Passing run #4002 ↗︎

0

4

0

0

0

Details:

Merge 4603405 into 09daa68...
Project: fides	Commit: 49ecdece7d ℹ️
Status: Passed	Duration: 01:36 💡
Started: Sep 8, 2023 7:44 PM	Ended: Sep 8, 2023 7:45 PM

_{This comment has been generated by cypress-bot as a result of this project's GitHub integration settings.}

[allisonking]

@eastandwestwind I thought this pattern worked reasonably well for testing the CMP API stuff, might be able to reuse for #3999

[eastandwestwind]

oh awesome! I'm so glad to see this worked here, and it'll make my life so much easier 🌟

[eastandwestwind]

Couple small things, but overall looking great @allisonking !