(*) 登录不返回密码

api/app/lib/controllers/auth/index.js

@@ -13,6 +13,7 @@ async function login(ctx, next) {
       const params = ctx.request.body;
       let password = Hex.stringify(MD5(params.password));
       const userRes = await models.User.findOne({
+         attributes: { exclude: ["password"] },
          where: {
             username: params.username,
             password: password,