Why does /api/get-account create a new access token in the database?

Hi, Why will casdoor create a new access token when I use /api/get-account?

If I access it just use access token without cookie, it will return a new access token to me, is this a feature or a bug?

why do you think it's a bug?

Well I just want to get user's property like score using their access-token from backend. Their access token is created when log in and saved in frontend. /get-account will create a lot new access token in database that will never be used.

like this, all these are created by get-account

I've tried /api/user-info, it will not create new access-token, but not return some detail properties like score.

only new login will create new access token. get-account will NOT

I hope so, but now it will create. You could test it just use curl.