We need to modify the API response handling to utilize the configuration setting that determines whether exception messages should be included in the API response. Currently, exception messages are always included, but with this change, the API will conditionally include the exception message based on the configuration. If the setting is disabled, the response will contain a generic error message along with a unique error code, enhancing security by avoiding unnecessary exposure of internal details.