Updated A LOT

server/routes/auth.js

@@ -2,6 +2,7 @@ const express = require('express');
 const bcrypt = require('bcryptjs');
 const { audit, one } = require('../db');
 const { publicUser, tokenFor } = require('../middleware/auth');
+const { capabilitiesForRole } = require('../services/roles');
 
 const router = express.Router();
 
@@ -20,7 +21,7 @@ router.post('/auth/login', (req, res) => {
     return res.status(401).json({ error: 'Invalid email or password' });
   }
   audit(user.id, 'login', 'user', user.id, null, { email: user.email });
-  return res.json({ token: tokenFor(user), user: publicUser(user) });
+  return res.json({ token: tokenFor(user), user: publicUser(user), capabilities: capabilitiesForRole(user.role) });
 });
 
 module.exports = router;