<?php

namespace App\ApiResource;

use ApiPlatform\Metadata\ApiFilter;
use ApiPlatform\Metadata\ApiProperty;
use ApiPlatform\Metadata\ApiResource;
use ApiPlatform\Metadata\Get;
use ApiPlatform\Metadata\GetCollection;
use ApiPlatform\Serializer\Filter\PropertyFilter;
use App\StateProvider\TeamMemberRoleCodeProvider;
use Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter;
use Symfony\Component\Serializer\Annotation\Groups;

#[ApiResource(operations: [
        new Get(),
        new GetCollection(),
    ], normalizationContext: [
        'groups' => [self::RESOURCE_GET],
        'openapi_definition_name' => 'get',
    ], security: 'is_granted("'.AuthenticatedVoter::IS_AUTHENTICATED.'")', provider: TeamMemberRoleCodeProvider::class,)]
enum TeamMemberRoleCode: string
{
    case Contributor = 'contributor';
    case Reader = 'reader';
    case Manager = 'manager';
    case Owner = 'owner';
    public const string RESOURCE_GET = 'team_member_role_code:get';

    public static function createInstance(?string $id): ?self
    {
        return self::tryFrom($id);
    }

    #[Groups([self::RESOURCE_GET])]
    #[ApiProperty(description: AppEntityDescriptions::getCodeDescription, writable: false)]
    public function getCodeDescription(): string
    {
        return match ($this) {
            self::Owner => 'The person has no privilege restrictions on any resources in the user account.',
            self::Manager => 'The person can read from and write to all resources that are available to the team, and can invite, remove and change the roles of team members.',
            self::Contributor => 'The person can read from and write to all resources that are available to the team.',
            self::Reader => 'The person can read from all resources that are available to the team.',
        };
    }

    #[Groups([self::RESOURCE_GET])]
    #[ApiProperty(description: AppEntityDescriptions::id, writable: false, identifier: true)]
    public function getId(): string
    {
        return $this->value;
    }
}

<?php

namespace App\StateProvider;

use ApiPlatform\Metadata\CollectionOperationInterface;
use ApiPlatform\Metadata\Operation;
use ApiPlatform\State\ProviderInterface;
use App\ApiResource\TeamMemberRoleCode;

class TeamMemberRoleCodeProvider implements ProviderInterface
{
    public function provide(
        Operation $operation,
        array $uriVariables = [],
        array $context = []
    ): array|object|null {
        if ($operation instanceof CollectionOperationInterface) {
            return TeamMemberRoleCode::cases();
        }

        return TeamMemberRoleCode::createInstance($uriVariables['id']);
    }
}