diff --git a/server/middleware/tokenAuth.js b/server/middleware/tokenAuth.js
index e69de29..54f3ab4 100644
--- a/server/middleware/tokenAuth.js
+++ b/server/middleware/tokenAuth.js
@@ -0,0 +1,28 @@
+const Token = require('../models/Token');
+
+async function tokenAuth(req, res, next) {
+    const token = req.query.token || req.body.token;
+
+    if (!token) {
+        return res.status(403).send('Unauthorized user');
+    }
+
+    const result = await Token.findOne({ where: { tokenID: token } });
+
+    const date = new Date();
+    if (
+        !result ||
+        (token.expires == true &&
+            date.setDate(date.getDate + 1) > result.createdAt)
+    ) {
+        await Token.destroy({ where: { tokenID: token } });
+        return res.status(511).send('Session expired');
+    }
+
+    const user = await result.getUser();
+    req.user = user;
+
+    return next();
+}
+
+module.exports = tokenAuth;