Move request/response models (#1754)

src/Api/Models/Public/AssociationWithPermissionsBaseModel.cs

@@ -0,0 +1,20 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+
+namespace Bit.Api.Models.Public
+{
+    public abstract class AssociationWithPermissionsBaseModel
+    {
+        /// <summary>
+        /// The associated object's unique identifier.
+        /// </summary>
+        /// <example>bfbc8338-e329-4dc0-b0c9-317c2ebf1a09</example>
+        [Required]
+        public Guid? Id { get; set; }
+        /// <summary>
+        /// When true, the read only permission will not allow the user or group to make changes to items.
+        /// </summary>
+        [Required]
+        public bool? ReadOnly { get; set; }
+    }
+}

src/Api/Models/Public/CollectionBaseModel.cs

@@ -0,0 +1,14 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace Bit.Api.Models.Public
+{
+    public abstract class CollectionBaseModel
+    {
+        /// <summary>
+        /// External identifier for reference or linking this collection to another system.
+        /// </summary>
+        /// <example>external_id_123456</example>
+        [StringLength(300)]
+        public string ExternalId { get; set; }
+    }
+}

src/Api/Models/Public/GroupBaseModel.cs

@@ -0,0 +1,27 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace Bit.Api.Models.Public
+{
+    public abstract class GroupBaseModel
+    {
+        /// <summary>
+        /// The name of the group.
+        /// </summary>
+        /// <example>Development Team</example>
+        [Required]
+        [StringLength(100)]
+        public string Name { get; set; }
+        /// <summary>
+        /// Determines if this group can access all collections within the organization, or only the associated
+        /// collections. If set to <c>true</c>, this option overrides any collection assignments.
+        /// </summary>
+        [Required]
+        public bool? AccessAll { get; set; }
+        /// <summary>
+        /// External identifier for reference or linking this group to another system, such as a user directory.
+        /// </summary>
+        /// <example>external_id_123456</example>
+        [StringLength(300)]
+        public string ExternalId { get; set; }
+    }
+}

src/Api/Models/Public/MemberBaseModel.cs

@@ -0,0 +1,62 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Enums;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public
+{
+    public abstract class MemberBaseModel
+    {
+        public MemberBaseModel() { }
+
+        public MemberBaseModel(OrganizationUser user)
+        {
+            if (user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+            
+            Type = user.Type;
+            AccessAll = user.AccessAll;
+            ExternalId = user.ExternalId;
+            ResetPasswordEnrolled = user.ResetPasswordKey != null;
+        }
+
+        public MemberBaseModel(OrganizationUserUserDetails user)
+        {
+            if (user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+            
+            Type = user.Type;
+            AccessAll = user.AccessAll;
+            ExternalId = user.ExternalId;
+            ResetPasswordEnrolled = user.ResetPasswordKey != null;
+        }
+
+        /// <summary>
+        /// The member's type (or role) within the organization.
+        /// </summary>
+        [Required]
+        public OrganizationUserType? Type { get; set; }
+        /// <summary>
+        /// Determines if this member can access all collections within the organization, or only the associated
+        /// collections. If set to <c>true</c>, this option overrides any collection assignments.
+        /// </summary>
+        [Required]
+        public bool? AccessAll { get; set; }
+        /// <summary>
+        /// External identifier for reference or linking this member to another system, such as a user directory.
+        /// </summary>
+        /// <example>external_id_123456</example>
+        [StringLength(300)]
+        public string ExternalId { get; set; }
+        /// <summary>
+        /// Returns <c>true</c> if the member has enrolled in Password Reset assistance within the organization
+        /// </summary>
+        [Required]
+        public bool ResetPasswordEnrolled { get; set; }
+    }
+}

src/Api/Models/Public/PolicyBaseModel.cs

@@ -0,0 +1,18 @@
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+
+namespace Bit.Api.Models.Public
+{
+    public abstract class PolicyBaseModel
+    {
+        /// <summary>
+        /// Determines if this policy is enabled and enforced.
+        /// </summary>
+        [Required]
+        public bool? Enabled { get; set; }
+        /// <summary>
+        /// Data for the policy.
+        /// </summary>
+        public Dictionary<string, object> Data { get; set; }
+    }
+}

src/Api/Models/Public/Request/AssociationWithPermissionsRequestModel.cs

@@ -0,0 +1,16 @@
+using Bit.Core.Models.Data;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class AssociationWithPermissionsRequestModel : AssociationWithPermissionsBaseModel
+    {
+        public SelectionReadOnly ToSelectionReadOnly()
+        {
+            return new SelectionReadOnly
+            {
+                Id = Id.Value,
+                ReadOnly = ReadOnly.Value
+            };
+        }
+    }
+}

src/Api/Models/Public/Request/CollectionUpdateRequestModel.cs

@@ -0,0 +1,19 @@
+using System.Collections.Generic;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class CollectionUpdateRequestModel : CollectionBaseModel
+    {
+        /// <summary>
+        /// The associated groups that this collection is assigned to.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsRequestModel> Groups { get; set; }
+
+        public Collection ToCollection(Collection existingCollection)
+        {
+            existingCollection.ExternalId = ExternalId;
+            return existingCollection;
+        }
+    }
+}

src/Api/Models/Public/Request/EventFilterRequestModel.cs

@@ -0,0 +1,51 @@
+using System;
+using Bit.Core.Exceptions;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class EventFilterRequestModel
+    {
+        /// <summary>
+        /// The start date. Must be less than the end date.
+        /// </summary>
+        public DateTime? Start { get; set; }
+        /// <summary>
+        /// The end date. Must be greater than the start date.
+        /// </summary>
+        public DateTime? End { get; set; }
+        /// <summary>
+        /// The unique identifier of the user that performed the event.
+        /// </summary>
+        public Guid? ActingUserId { get; set; }
+        /// <summary>
+        /// The unique identifier of the related item that the event describes.
+        /// </summary>
+        public Guid? ItemId { get; set; }
+        /// <summary>
+        /// A cursor for use in pagination.
+        /// </summary>
+        public string ContinuationToken { get; set; }
+
+        public Tuple<DateTime, DateTime> ToDateRange()
+        {
+            if (!End.HasValue || !Start.HasValue)
+            {
+                End = DateTime.UtcNow.Date.AddDays(1).AddMilliseconds(-1);
+                Start = DateTime.UtcNow.Date.AddDays(-30);
+            }
+            else if (Start.Value > End.Value)
+            {
+                var newEnd = Start;
+                Start = End;
+                End = newEnd;
+            }
+
+            if ((End.Value - Start.Value) > TimeSpan.FromDays(367))
+            {
+                throw new BadRequestException("Date range must be < 367 days.");
+            }
+
+            return new Tuple<DateTime, DateTime>(Start.Value, End.Value);
+        }
+    }
+}

src/Api/Models/Public/Request/GroupCreateUpdateRequestModel.cs

@@ -0,0 +1,30 @@
+using System;
+using System.Collections.Generic;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class GroupCreateUpdateRequestModel : GroupBaseModel
+    {
+        /// <summary>
+        /// The associated collections that this group can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsRequestModel> Collections { get; set; }
+
+        public Group ToGroup(Guid orgId)
+        {
+            return ToGroup(new Group
+            {
+                OrganizationId = orgId
+            });
+        }
+
+        public Group ToGroup(Group existingGroup)
+        {
+            existingGroup.Name = Name;
+            existingGroup.AccessAll = AccessAll.Value;
+            existingGroup.ExternalId = ExternalId;
+            return existingGroup;
+        }
+    }
+}

src/Api/Models/Public/Request/MemberCreateRequestModel.cs

@@ -0,0 +1,24 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Models.Table;
+using Bit.Core.Utilities;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class MemberCreateRequestModel : MemberUpdateRequestModel
+    {
+        /// <summary>
+        /// The member's email address.
+        /// </summary>
+        /// <example>jsmith@example.com</example>
+        [Required]
+        [StringLength(256)]
+        [StrictEmailAddress]
+        public string Email { get; set; }
+
+        public override OrganizationUser ToOrganizationUser(OrganizationUser existingUser)
+        {
+            throw new NotImplementedException();
+        }
+    }
+}

src/Api/Models/Public/Request/MemberUpdateRequestModel.cs

@@ -0,0 +1,21 @@
+using System.Collections.Generic;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class MemberUpdateRequestModel : MemberBaseModel
+    {
+        /// <summary>
+        /// The associated collections that this member can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsRequestModel> Collections { get; set; }
+
+        public virtual OrganizationUser ToOrganizationUser(OrganizationUser existingUser)
+        {
+            existingUser.Type = Type.Value;
+            existingUser.AccessAll = AccessAll.Value;
+            existingUser.ExternalId = ExternalId;
+            return existingUser;
+        }
+    }
+}

src/Api/Models/Public/Request/OrganizationImportRequestModel.cs

@@ -0,0 +1,109 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Models.Business;
+using Table = Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class OrganizationImportRequestModel
+    {
+        /// <summary>
+        /// Groups to import.
+        /// </summary>
+        public OrganizationImportGroupRequestModel[] Groups { get; set; }
+        /// <summary>
+        /// Members to import.
+        /// </summary>
+        public OrganizationImportMemberRequestModel[] Members { get; set; }
+        /// <summary>
+        /// Determines if the data in this request should overwrite or append to the existing organization data.
+        /// </summary>
+        [Required]
+        public bool? OverwriteExisting { get; set; }
+        /// <summary>
+        /// Indicates an import of over 2000 users and/or groups is expected
+        /// </summary>
+        public bool LargeImport { get; set; } = false;
+
+        public class OrganizationImportGroupRequestModel
+        {
+            /// <summary>
+            /// The name of the group.
+            /// </summary>
+            /// <example>Development Team</example>
+            [Required]
+            [StringLength(100)]
+            public string Name { get; set; }
+            /// <summary>
+            /// External identifier for reference or linking this group to another system, such as a user directory.
+            /// </summary>
+            /// <example>external_id_123456</example>
+            [Required]
+            [StringLength(300)]
+            public string ExternalId { get; set; }
+            /// <summary>
+            /// The associated external ids for members in this group.
+            /// </summary>
+            public IEnumerable<string> MemberExternalIds { get; set; }
+
+            public ImportedGroup ToImportedGroup(Guid organizationId)
+            {
+                var importedGroup = new ImportedGroup
+                {
+                    Group = new Table.Group
+                    {
+                        OrganizationId = organizationId,
+                        Name = Name,
+                        ExternalId = ExternalId
+                    },
+                    ExternalUserIds = new HashSet<string>(MemberExternalIds)
+                };
+
+                return importedGroup;
+            }
+        }
+
+        public class OrganizationImportMemberRequestModel : IValidatableObject
+        {
+            /// <summary>
+            /// The member's email address. Required for non-deleted users.
+            /// </summary>
+            /// <example>jsmith@example.com</example>
+            [EmailAddress]
+            [StringLength(256)]
+            public string Email { get; set; }
+            /// <summary>
+            /// External identifier for reference or linking this member to another system, such as a user directory.
+            /// </summary>
+            /// <example>external_id_123456</example>
+            [Required]
+            [StringLength(300)]
+            public string ExternalId { get; set; }
+            /// <summary>
+            /// Determines if this member should be removed from the organization during import.
+            /// </summary>
+            public bool Deleted { get; set; }
+
+            public ImportedOrganizationUser ToImportedOrganizationUser()
+            {
+                var importedUser = new ImportedOrganizationUser
+                {
+                    Email = Email.ToLowerInvariant(),
+                    ExternalId = ExternalId
+                };
+
+                return importedUser;
+            }
+
+            public IEnumerable<ValidationResult> Validate(ValidationContext validationContext)
+            {
+                if (string.IsNullOrWhiteSpace(Email) && !Deleted)
+                {
+                    yield return new ValidationResult("Email is required for enabled members.",
+                        new string[] { nameof(Email) });
+                }
+            }
+        }
+    }
+}

src/Api/Models/Public/Request/PolicyUpdateRequestModel.cs

@@ -0,0 +1,24 @@
+using System;
+using Bit.Core.Models.Table;
+using Newtonsoft.Json;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class PolicyUpdateRequestModel : PolicyBaseModel
+    {
+        public Policy ToPolicy(Guid orgId)
+        {
+            return ToPolicy(new Policy
+            {
+                OrganizationId = orgId
+            });
+        }
+
+        public virtual Policy ToPolicy(Policy existingPolicy)
+        {
+            existingPolicy.Enabled = Enabled.GetValueOrDefault();
+            existingPolicy.Data = Data != null ? JsonConvert.SerializeObject(Data) : null;
+            return existingPolicy;
+        }
+    }
+}

src/Api/Models/Public/Request/UpdateGroupIdsRequestModel.cs

@@ -0,0 +1,13 @@
+using System;
+using System.Collections.Generic;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class UpdateGroupIdsRequestModel
+    {
+        /// <summary>
+        /// The associated group ids that this object can access.
+        /// </summary>
+        public IEnumerable<Guid> GroupIds { get; set; }
+    }
+}

src/Api/Models/Public/Request/UpdateMemberIdsRequestModel.cs

@@ -0,0 +1,13 @@
+using System;
+using System.Collections.Generic;
+
+namespace Bit.Api.Models.Public.Request
+{
+    public class UpdateMemberIdsRequestModel
+    {
+        /// <summary>
+        /// The associated member ids that have access to this object.
+        /// </summary>
+        public IEnumerable<Guid> MemberIds { get; set; }
+    }
+}

src/Api/Models/Public/Response/AssociationWithPermissionsResponseModel.cs

@@ -0,0 +1,18 @@
+using System;
+using Bit.Core.Models.Data;
+
+namespace Bit.Api.Models.Public.Response
+{
+    public class AssociationWithPermissionsResponseModel : AssociationWithPermissionsBaseModel
+    {
+        public AssociationWithPermissionsResponseModel(SelectionReadOnly selection)
+        {
+            if (selection == null)
+            {
+                throw new ArgumentNullException(nameof(selection));
+            }
+            Id = selection.Id;
+            ReadOnly = selection.ReadOnly;
+        }
+    }
+}

src/Api/Models/Public/Response/CollectionResponseModel.cs

@@ -0,0 +1,44 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Response
+{
+    /// <summary>
+    /// A collection.
+    /// </summary>
+    public class CollectionResponseModel : CollectionBaseModel, IResponseModel
+    {
+        public CollectionResponseModel(Collection collection, IEnumerable<SelectionReadOnly> groups)
+        {
+            if (collection == null)
+            {
+                throw new ArgumentNullException(nameof(collection));
+            }
+
+            Id = collection.Id;
+            ExternalId = collection.ExternalId;
+            Groups = groups?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>collection</example>
+        [Required]
+        public string Object => "collection";
+        /// <summary>
+        /// The collection's unique identifier.
+        /// </summary>
+        /// <example>539a36c5-e0d2-4cf9-979e-51ecf5cf6593</example>
+        [Required]
+        public Guid Id { get; set; }
+        /// <summary>
+        /// The associated groups that this collection is assigned to.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsResponseModel> Groups { get; set; }
+    }
+}

src/Api/Models/Public/Response/ErrorResponseModel.cs

@@ -0,0 +1,79 @@
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
+
+namespace Bit.Api.Models.Public.Response
+{
+    public class ErrorResponseModel : IResponseModel
+    {
+        public ErrorResponseModel(string message)
+        {
+            Message = message;
+        }
+
+        public ErrorResponseModel(ModelStateDictionary modelState)
+        {
+            Message = "The request's model state is invalid.";
+            Errors = new Dictionary<string, IEnumerable<string>>();
+
+            var keys = modelState.Keys.ToList();
+            var values = modelState.Values.ToList();
+
+            for (var i = 0; i < values.Count; i++)
+            {
+                var value = values[i];
+                if (keys.Count <= i)
+                {
+                    // Keys not available for some reason.
+                    break;
+                }
+
+                var key = keys[i];
+                if (value.ValidationState != ModelValidationState.Invalid || value.Errors.Count == 0)
+                {
+                    continue;
+                }
+
+                var errors = value.Errors.Select(e => e.ErrorMessage);
+                Errors.Add(key, errors);
+            }
+        }
+
+        public ErrorResponseModel(Dictionary<string, IEnumerable<string>> errors)
+            : this("Errors have occurred.", errors)
+        { }
+
+        public ErrorResponseModel(string errorKey, string errorValue)
+            : this(errorKey, new string[] { errorValue })
+        { }
+
+        public ErrorResponseModel(string errorKey, IEnumerable<string> errorValues)
+            : this(new Dictionary<string, IEnumerable<string>> { { errorKey, errorValues } })
+        { }
+
+        public ErrorResponseModel(string message, Dictionary<string, IEnumerable<string>> errors)
+        {
+            Message = message;
+            Errors = errors;
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>error</example>
+        [Required]
+        public string Object => "error";
+        /// <summary>
+        /// A human-readable message providing details about the error.
+        /// </summary>
+        /// <example>The request model is invalid.</example>
+        [Required]
+        public string Message { get; set; }
+        /// <summary>
+        /// If multiple errors occurred, they are listed in dictionary. Errors related to a specific
+        /// request parameter will include a dictionary key describing that parameter.
+        /// </summary>
+        public Dictionary<string, IEnumerable<string>> Errors { get; set; }
+    }
+}

src/Api/Models/Public/Response/EventResponseModel.cs

@@ -0,0 +1,88 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Enums;
+using Bit.Core.Models.Data;
+
+namespace Bit.Api.Models.Public.Response
+{
+    /// <summary>
+    /// An event log.
+    /// </summary>
+    public class EventResponseModel : IResponseModel
+    {
+        public EventResponseModel(IEvent ev)
+        {
+            if (ev == null)
+            {
+                throw new ArgumentNullException(nameof(ev));
+            }
+
+            Type = ev.Type;
+            ItemId = ev.CipherId;
+            CollectionId = ev.CollectionId;
+            GroupId = ev.GroupId;
+            PolicyId = ev.PolicyId;
+            MemberId = ev.OrganizationUserId;
+            ActingUserId = ev.ActingUserId;
+            Date = ev.Date;
+            Device = ev.DeviceType;
+            IpAddress = ev.IpAddress;
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>event</example>
+        [Required]
+        public string Object => "event";
+        /// <summary>
+        /// The type of event.
+        /// </summary>
+        [Required]
+        public EventType Type { get; set; }
+        /// <summary>
+        /// The unique identifier of the related item that the event describes.
+        /// </summary>
+        /// <example>3767a302-8208-4dc6-b842-030428a1cfad</example>
+        public Guid? ItemId { get; set; }
+        /// <summary>
+        /// The unique identifier of the related collection that the event describes.
+        /// </summary>
+        /// <example>bce212a4-25f3-4888-8a0a-4c5736d851e0</example>
+        public Guid? CollectionId { get; set; }
+        /// <summary>
+        /// The unique identifier of the related group that the event describes.
+        /// </summary>
+        /// <example>f29a2515-91d2-4452-b49b-5e8040e6b0f4</example>
+        public Guid? GroupId { get; set; }
+        /// <summary>
+        /// The unique identifier of the related policy that the event describes.
+        /// </summary>
+        /// <example>f29a2515-91d2-4452-b49b-5e8040e6b0f4</example>
+        public Guid? PolicyId { get; set; }
+        /// <summary>
+        /// The unique identifier of the related member that the event describes.
+        /// </summary>
+        /// <example>e68b8629-85eb-4929-92c0-b84464976ba4</example>
+        public Guid? MemberId { get; set; }
+        /// <summary>
+        /// The unique identifier of the user that performed the event.
+        /// </summary>
+        /// <example>a2549f79-a71f-4eb9-9234-eb7247333f94</example>
+        public Guid? ActingUserId { get; set; }
+        /// <summary>
+        /// The date/timestamp when the event occurred.
+        /// </summary>
+        [Required]
+        public DateTime Date { get; set; }
+        /// <summary>
+        /// The type of device used by the acting user when the event occurred.
+        /// </summary>
+        public DeviceType? Device { get; set; }
+        /// <summary>
+        /// The IP address of the acting user.
+        /// </summary>
+        /// <example>172.16.254.1</example>
+        public string IpAddress { get; set; }
+    }
+}

src/Api/Models/Public/Response/GroupResponseModel.cs

@@ -0,0 +1,46 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Response
+{
+    /// <summary>
+    /// A user group.
+    /// </summary>
+    public class GroupResponseModel : GroupBaseModel, IResponseModel
+    {
+        public GroupResponseModel(Group group, IEnumerable<SelectionReadOnly> collections)
+        {
+            if (group == null)
+            {
+                throw new ArgumentNullException(nameof(group));
+            }
+
+            Id = group.Id;
+            Name = group.Name;
+            AccessAll = group.AccessAll;
+            ExternalId = group.ExternalId;
+            Collections = collections?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>group</example>
+        [Required]
+        public string Object => "group";
+        /// <summary>
+        /// The group's unique identifier.
+        /// </summary>
+        /// <example>539a36c5-e0d2-4cf9-979e-51ecf5cf6593</example>
+        [Required]
+        public Guid Id { get; set; }
+        /// <summary>
+        /// The associated collections that this group can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsResponseModel> Collections { get; set; }
+    }
+}

src/Api/Models/Public/Response/IResponseModel.cs

@@ -0,0 +1,7 @@
+namespace Bit.Api.Models.Public.Response
+{
+    public interface IResponseModel
+    {
+        string Object { get; }
+    }
+}

src/Api/Models/Public/Response/ListResponseModel.cs

@@ -0,0 +1,30 @@
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+
+namespace Bit.Api.Models.Public.Response
+{
+    public class ListResponseModel<T> : IResponseModel where T : IResponseModel
+    {
+        public ListResponseModel(IEnumerable<T> data, string continuationToken = null)
+        {
+            Data = data;
+            ContinuationToken = continuationToken;
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>list</example>
+        [Required]
+        public string Object => "list";
+        /// <summary>
+        /// An array containing the actual response elements, paginated by any request parameters.
+        /// </summary>
+        [Required]
+        public IEnumerable<T> Data { get; set; }
+        /// <summary>
+        /// A cursor for use in pagination.
+        /// </summary>
+        public string ContinuationToken { get; set; }
+    }
+}

src/Api/Models/Public/Response/MemberResponseModel.cs

@@ -0,0 +1,96 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using Bit.Core.Enums;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Api.Models.Public.Response
+{
+    /// <summary>
+    /// An organization member.
+    /// </summary>
+    public class MemberResponseModel : MemberBaseModel, IResponseModel
+    {
+        public MemberResponseModel(OrganizationUser user, IEnumerable<SelectionReadOnly> collections)
+            : base(user)
+        {
+            if (user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+
+            Id = user.Id;
+            UserId = user.UserId;
+            Email = user.Email;
+            Status = user.Status;
+            Collections = collections?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        public MemberResponseModel(OrganizationUserUserDetails user, bool twoFactorEnabled,
+            IEnumerable<SelectionReadOnly> collections)
+            : base(user)
+        {
+            if (user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+
+            Id = user.Id;
+            UserId = user.UserId;
+            Name = user.Name;
+            Email = user.Email;
+            TwoFactorEnabled = twoFactorEnabled;
+            Status = user.Status;
+            Collections = collections?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>member</example>
+        [Required]
+        public string Object => "member";
+        /// <summary>
+        /// The member's unique identifier within the organization.
+        /// </summary>
+        /// <example>539a36c5-e0d2-4cf9-979e-51ecf5cf6593</example>
+        [Required]
+        public Guid Id { get; set; }
+        /// <summary>
+        /// The member's unique identifier across Bitwarden.
+        /// </summary>
+        /// <example>48b47ee1-493e-4c67-aef7-014996c40eca</example>
+        [Required]
+        public Guid? UserId { get; set; }
+        /// <summary>
+        /// The member's name, set from their user account profile.
+        /// </summary>
+        /// <example>John Smith</example>
+        public string Name { get; set; }
+        /// <summary>
+        /// The member's email address.
+        /// </summary>
+        /// <example>jsmith@example.com</example>
+        [Required]
+        public string Email { get; set; }
+        /// <summary>
+        /// Returns <c>true</c> if the member has a two-step login method enabled on their user account.
+        /// </summary>
+        [Required]
+        public bool TwoFactorEnabled { get; set; }
+        /// <summary>
+        /// The member's status within the organization. All created members start with a status of "Invited".
+        /// Once a member accept's their invitation to join the organization, their status changes to "Accepted".
+        /// Accepted members are then "Confirmed" by an organization administrator. Once a member is "Confirmed",
+        /// their status can no longer change.
+        /// </summary>
+        [Required]
+        public OrganizationUserStatusType Status { get; set; }
+        /// <summary>
+        /// The associated collections that this member can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsResponseModel> Collections { get; set; }
+    }
+}

src/Api/Models/Public/Response/PolicyResponseModel.cs

@@ -0,0 +1,49 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Enums;
+using Bit.Core.Models.Table;
+using Newtonsoft.Json;
+
+namespace Bit.Api.Models.Public.Response
+{
+    /// <summary>
+    /// A policy.
+    /// </summary>
+    public class PolicyResponseModel : PolicyBaseModel, IResponseModel
+    {
+        public PolicyResponseModel(Policy policy)
+        {
+            if (policy == null)
+            {
+                throw new ArgumentNullException(nameof(policy));
+            }
+
+            Id = policy.Id;
+            Type = policy.Type;
+            Enabled = policy.Enabled;
+            if (!string.IsNullOrWhiteSpace(policy.Data))
+            {
+                Data = JsonConvert.DeserializeObject<Dictionary<string, object>>(policy.Data);
+            }
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>policy</example>
+        [Required]
+        public string Object => "policy";
+        /// <summary>
+        /// The policy's unique identifier.
+        /// </summary>
+        /// <example>539a36c5-e0d2-4cf9-979e-51ecf5cf6593</example>
+        [Required]
+        public Guid Id { get; set; }
+        /// <summary>
+        /// The type of policy.
+        /// </summary>
+        [Required]
+        public PolicyType? Type { get; set; }
+    }
+}