[api] add check in webui controller