diff --git a/apps/authentication/middleware.py b/apps/authentication/middleware.py
index d1f3b087b..64f8818a9 100644
--- a/apps/authentication/middleware.py
+++ b/apps/authentication/middleware.py
@@ -35,7 +35,7 @@ class MFAMiddleware:
 
         # 这个是 mfa 登录页需要的请求, 也得放出来, 用户其实已经在 CAS/OIDC 中完成登录了
         white_urls = [
-            'login/mfa', 'mfa/select', 'jsi18n/', '/static/',
+            'login/mfa', 'mfa/select', 'mfa/face','jsi18n/', '/static/',
             '/profile/otp', '/logout/',
         ]
         for url in white_urls: