diff --git a/backend/middlewares/auth.mjs b/backend/middlewares/auth.mjs
new file mode 100644
index 0000000..196cf73
--- /dev/null
+++ b/backend/middlewares/auth.mjs
@@ -0,0 +1,11 @@
+import { store } from "../store.mjs";
+
+export const auth = (req, res, next) => {
+  const accessToken = req.headers['access-token'];
+  res.locals.user = store.users.find(user => user.accessToken === accessToken);
+  if (!res.locals.user) {
+    res.status(401);
+    res.send({ message: 'unauthorized' });
+  }
+  else next();
+};
diff --git a/frontend b/frontend
index a86bd04..e4de199 160000
--- a/frontend
+++ b/frontend
@@ -1 +1 @@
-Subproject commit a86bd04da25c3715e7853cd1158b7e4929eacad4
+Subproject commit e4de1997a3c34a9fb96136e82446ee926104c3d0