diff --git a/src/middleware/auth.js b/src/middleware/auth.js
new file mode 100644
index 0000000..911d042
--- /dev/null
+++ b/src/middleware/auth.js
@@ -0,0 +1,8 @@
+function requireAuth(req, res, next) {
+  if (req.session && req.session.authenticated) {
+    return next();
+  }
+  return res.redirect('/login');
+}
+
+module.exports = { requireAuth };