From f9e531a44adad38d127c6a25e7723277d3872f2a Mon Sep 17 00:00:00 2001
From: Peter Cummuskey <pcummuskey@bravurasolutions.com>
Date: Fri, 19 Feb 2016 10:11:57 +1300
Subject: [PATCH] Added a couple more tests.

---
 package.json                    |  3 ++-
 src/test/api/auth/login.spec.js | 22 ++++++++++++++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 3df23dd..055185a 100644
--- a/package.json
+++ b/package.json
@@ -80,6 +80,7 @@
     "traceur": "0.0.102",
     "traceur-runner": "^2.0.1",
     "traceur-source-maps": "^1.0.6",
-    "underscore": "^1.8.3"
+    "underscore": "^1.8.3",
+    "http-constants": "1.1.0"
   }
 }
diff --git a/src/test/api/auth/login.spec.js b/src/test/api/auth/login.spec.js
index d9f7805..f37e748 100644
--- a/src/test/api/auth/login.spec.js
+++ b/src/test/api/auth/login.spec.js
@@ -90,4 +90,26 @@ describe('POST:/auth', () => {
 
 	});
 
+	describe('when successfully logged-in', () => {
+
+		let result = null;
+
+		before(() => {
+			return request('email@somewhere.com', 'password').then((response) => {
+				result = response;
+			});
+		});
+
+		it('should not have a password listed.', () => {
+			expect(result.password).to.not.exist;
+		});
+
+		it('should have a list of user permissions', () => {
+			expect(result.permissions).to.exist;
+			expect(result.permissions).to.be.an('array');
+			expect(result.permissions.length).to.be.greaterThan(0);
+		});
+
+	});
+
 });