org members public api

src/Core/Models/Api/Public/AssociationWithPermissionsBaseModel.cs

@@ -4,7 +4,7 @@ using Newtonsoft.Json;
 
 namespace Bit.Core.Models.Api.Public
 {
-    public abstract class BaseAssociationWithPermissionsModel
+    public abstract class AssociationWithPermissionsBaseModel
     {
         /// <summary>
         /// The associated object's unique identifier.

src/Core/Models/Api/Public/MemberBaseModel.cs

@@ -0,0 +1,55 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Enums;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Core.Models.Api.Public
+{
+    public abstract class MemberBaseModel
+    {
+        public MemberBaseModel() { }
+
+        public MemberBaseModel(OrganizationUser user)
+        {
+            if(user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+            
+            Type = user.Type;
+            AccessAll = user.AccessAll;
+            ExternalId = user.ExternalId;
+        }
+
+        public MemberBaseModel(OrganizationUserUserDetails user)
+        {
+            if(user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+            
+            Type = user.Type;
+            AccessAll = user.AccessAll;
+            ExternalId = user.ExternalId;
+        }
+
+        /// <summary>
+        /// The member's type (or role) within the organization.
+        /// </summary>
+        [Required]
+        public OrganizationUserType? Type { get; set; }
+        /// <summary>
+        /// Determines if this member can access all collections within the organization, or only the associated
+        /// collections. If set to <c>true</c>, this option overrides any collection assignments.
+        /// </summary>
+        [Required]
+        public bool? AccessAll { get; set; }
+        /// <summary>
+        /// External identifier linking this member to another system, such as a user directory.
+        /// </summary>
+        /// <example>external_id_123456</example>
+        [StringLength(300)]
+        public string ExternalId { get; set; }
+    }
+}

src/Core/Models/Api/Public/Request/AssociationWithPermissionsRequestModel.cs

@@ -2,7 +2,7 @@
 
 namespace Bit.Core.Models.Api.Public
 {
-    public class AssociationWithPermissionsRequestModel : BaseAssociationWithPermissionsModel
+    public class AssociationWithPermissionsRequestModel : AssociationWithPermissionsBaseModel
     {
         public SelectionReadOnly ToSelectionReadOnly()
         {

src/Core/Models/Api/Public/Request/MemberCreateRequestModel.cs

@@ -0,0 +1,22 @@
+using System;
+using System.ComponentModel.DataAnnotations;
+using Bit.Core.Models.Table;
+
+namespace Bit.Core.Models.Api.Public
+{
+    public class MemberCreateRequestModel : MemberUpdateRequestModel
+    {
+        /// <summary>
+        /// The member's email address.
+        /// </summary>
+        /// <example>jsmith@company.com</example>
+        [Required]
+        [EmailAddress]
+        public string Email { get; set; }
+
+        public override OrganizationUser ToOrganizationUser(OrganizationUser existingUser)
+        {
+            throw new NotImplementedException();
+        }
+    }
+}

src/Core/Models/Api/Public/Request/MemberUpdateRequestModel.cs

@@ -0,0 +1,21 @@
+using System.Collections.Generic;
+using Bit.Core.Models.Table;
+
+namespace Bit.Core.Models.Api.Public
+{
+    public class MemberUpdateRequestModel : MemberBaseModel
+    {
+        /// <summary>
+        /// The associated collections that this member can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsRequestModel> Collections { get; set; }
+
+        public virtual OrganizationUser ToOrganizationUser(OrganizationUser existingUser)
+        {
+            existingUser.Type = Type.Value;
+            existingUser.AccessAll = AccessAll.Value;
+            existingUser.ExternalId = ExternalId;
+            return existingUser;
+        }
+    }
+}

src/Core/Models/Api/Public/Response/AssociationWithPermissionsResponseModel.cs

@@ -3,7 +3,7 @@ using Bit.Core.Models.Data;
 
 namespace Bit.Core.Models.Api.Public
 {
-    public class AssociationWithPermissionsResponseModel : BaseAssociationWithPermissionsModel
+    public class AssociationWithPermissionsResponseModel : AssociationWithPermissionsBaseModel
     {
         public AssociationWithPermissionsResponseModel(SelectionReadOnly selection)
         {

src/Core/Models/Api/Public/Response/MemberResponseModel.cs

@@ -0,0 +1,88 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using Bit.Core.Enums;
+using Bit.Core.Models.Data;
+using Bit.Core.Models.Table;
+
+namespace Bit.Core.Models.Api.Public
+{
+    /// <summary>
+    /// An organization member.
+    /// </summary>
+    public class MemberResponseModel : MemberBaseModel, IResponseModel
+    {
+        public MemberResponseModel(OrganizationUser user, IEnumerable<SelectionReadOnly> collections)
+            : base(user)
+        {
+            if(user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+
+            Id = user.Id;
+            Email = user.Email;
+            Status = user.Status;
+            Collections = collections?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        public MemberResponseModel(OrganizationUserUserDetails user, bool twoFactorEnabled,
+            IEnumerable<SelectionReadOnly> collections)
+            : base(user)
+        {
+            if(user == null)
+            {
+                throw new ArgumentNullException(nameof(user));
+            }
+
+            Id = user.Id;
+            Name = user.Name;
+            Email = user.Email;
+            TwoFactorEnabled = twoFactorEnabled;
+            Status = user.Status;
+            Collections = collections?.Select(c => new AssociationWithPermissionsResponseModel(c));
+        }
+
+        /// <summary>
+        /// String representing the object's type. Objects of the same type share the same properties.
+        /// </summary>
+        /// <example>member</example>
+        [Required]
+        public string Object => "member";
+        /// <summary>
+        /// The member's unique identifier.
+        /// </summary>
+        /// <example>539a36c5-e0d2-4cf9-979e-51ecf5cf6593</example>
+        [Required]
+        public Guid Id { get; set; }
+        /// <summary>
+        /// The member's name, set from their user account profile.
+        /// </summary>
+        /// <example>John Smith</example>
+        public string Name { get; set; }
+        /// <summary>
+        /// The member's email address.
+        /// </summary>
+        /// <example>jsmith@company.com</example>
+        [Required]
+        public string Email { get; set; }
+        /// <summary>
+        /// Returns <c>true</c> if the member has a two-step login method enabled on their user account.
+        /// </summary>
+        [Required]
+        public bool TwoFactorEnabled { get; set; }
+        /// <summary>
+        /// The member's status within the organization. All created members start with a status of "Invited".
+        /// Once a member accept's their invitation to join the organization, their status changes to "Accepted".
+        /// Accepted members are then "Confirmed" by an organization administrator. Once a member is "Confirmed",
+        /// their status can no longer change.
+        /// </summary>
+        [Required]
+        public OrganizationUserStatusType Status { get; set; }
+        /// <summary>
+        /// The associated collections that this member can access.
+        /// </summary>
+        public IEnumerable<AssociationWithPermissionsResponseModel> Collections { get; set; }
+    }
+}