The system adopts the principle of least privilege: the API is only responsible for verifying whether the incoming username and password match, and does not return all user data, in order to prevent the user database from leaking if the local end is cracked.