diff --git a/internal/api/router.go b/internal/api/router.go
index 321e16a9a..6f474a67f 100644
--- a/internal/api/router.go
+++ b/internal/api/router.go
@@ -369,4 +369,5 @@ func GinParseToken(authClient *rpcli.AuthClient) gin.HandlerFunc {
 var Whitelist = []string{
 	"/auth/get_admin_token",
 	"/auth/parse_token",
+	"/captcha",
 }