Add Organization api resource

src/ApiResource/User/OrganizationApiResource.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace App\ApiResource\User;
+
+use ApiPlatform\Metadata as API;
+use App\State\ApiResourceStateProcessor;
+use App\State\ApiResourceStateProvider;
+use Symfony\Component\Validator\Constraints as Assert;
+
+/**
+ * Sometimes an Organization is behind a User account,
+ * we keep their data separated from the User record to allow for other User types,
+ * like the ones owned by an individual, to exist all at the same level.\
+ * \
+ * All Organization records are only visible to their respective owners and platform admins.
+ * Sensitive data is encrypted before being stored in the database.
+ */
+#[API\ApiResource(
+    shortName: 'Organization',
+    security: 'is_granted("ORGANIZATION_VIEW", object)',
+    provider: ApiResourceStateProvider::class,
+    processor: ApiResourceStateProcessor::class,
+    uriTemplate: '/users/{id}/organization',
+    uriVariables: [
+        'id' => new API\Link(
+            fromClass: UserApiResource::class,
+            fromProperty: 'Organization'
+        ),
+    ]
+)]
+#[API\Get()]
+#[API\Patch(
+    securityPostDenormalize: 'is_granted("ORGANIZATION_EDIT", previous_object)',
+)]
+class OrganizationApiResource
+{
+    #[API\ApiProperty(identifier: true, writable: false)]
+    public UserApiResource $user;
+
+    /**
+     * ID for tax purposes. e.g: NIF (formerly CIF), Umsatzsteuer-Id, EID, etc.
+     */
+    #[API\ApiProperty(
+        securityPostDenormalize: 'is_granted("ORGANIZATION_EDIT", previous_object)',
+    )]
+    #[Assert\NotBlank()]
+    public string $taxId;
+
+    /**
+     * Organization legal name before government,
+     * as it appears on legal documents issued by or for this organization.\
+     * Will be used as last option for the display name of the User. 
+     */
+    #[API\ApiProperty(
+        securityPostDenormalize: 'is_granted("ORGANIZATION_EDIT", previous_object)',
+    )]
+    #[Assert\NotBlank()]
+    public string $legalName;
+
+    /**
+     * The name under which the organization presents itself.\
+     * Might be similar to the legal name or completely different.\
+     * Will be used as display name for the User when present.
+     */
+    #[API\ApiProperty(
+        securityPostDenormalize: 'is_granted("ORGANIZATION_EDIT", previous_object)',
+    )]
+    public string $businessName;
+}

src/OpenApi/RedocExtensionsTrait.php

@@ -21,7 +21,7 @@ trait RedocExtensionsTrait
         $groups = [
             [
                 'name' => 'Users',
-                'tags' => ['User', 'UserToken', 'Person'],
+                'tags' => ['User', 'UserToken', 'Person', 'Organization'],
             ],
             [
                 'name' => 'Projects',