update tests

app/Services/Auth/ApiLoginSecurityService.php

@@ -129,7 +129,7 @@ class ApiLoginSecurityService
     /**
      * Top-level JSON body for API login success responses.
      *
-     * @return array{status: true, token: string, user: array{id: int, name: string, roles: object, class_section_id: ?int, class_section_name: ?string}}
+     * @return array{status: true, token: string, access_token: string, token_type: string, expires_in: int, user: array{id: int, name: string, firstname: ?string, lastname: ?string, email: ?string, roles: object, class_section_id: ?int, class_section_name: ?string}}
      */
     public function buildLoginResponse(User $user, string $jwtToken): array
     {
@@ -139,10 +139,19 @@ class ApiLoginSecurityService
 
         return [
             'status' => true,
+            // Keep both names. Older clients read `token`; JWT-aware clients often read
+            // `access_token`. Removing either one just makes login fail in a new and
+            // irritatingly avoidable way.
             'token' => $jwtToken,
+            'access_token' => $jwtToken,
+            'token_type' => 'bearer',
+            'expires_in' => (int) config('jwt.ttl') * 60,
             'user' => [
                 'id' => (int) $user->id,
                 'name' => $fullName,
+                'firstname' => $user->firstname,
+                'lastname' => $user->lastname,
+                'email' => $user->email,
                 'roles' => $this->rolesToObjectMap($roleNames),
                 'class_section_id' => $teacherContext['class_section_id'],
                 'class_section_name' => $teacherContext['class_section_name'],