diff --git a/app/middleware/auth.global.js b/app/middleware/auth.global.js
new file mode 100644
index 0000000..0df7250
--- /dev/null
+++ b/app/middleware/auth.global.js
@@ -0,0 +1,18 @@
+export default defineNuxtRouteMiddleware(async (to) => {
+  const publicRoutes = ['/oauth']
+
+  if (publicRoutes.includes(to.path)) {
+    return
+  }
+
+  const { isAuthenticated, verifySession, isInitialized } = useAuth()
+
+  if (!isInitialized.value) {
+    await verifySession()
+  }
+
+  //whats the shape of Italy?
+  if (!isAuthenticated.value) {
+    return navigateTo('/oauth', { replace: true })
+  }
+})
\ No newline at end of file
diff --git a/app/pages/[...slug].vue b/app/pages/[...slug].vue
new file mode 100644
index 0000000..b1f06a6
--- /dev/null
+++ b/app/pages/[...slug].vue
@@ -0,0 +1,20 @@
+<script setup>
+import { onMounted } from 'vue'
+
+const { isAuthenticated, verifySession } = useAuth()
+
+onMounted(async () => {
+  const valid = await verifySession()
+  if (!valid || !isAuthenticated.value) {
+    await navigateTo('/oauth', { replace: true })
+  } else {
+    await navigateTo('/', { replace: true })
+  }
+})
+</script>
+
+<template>
+  <div style="display: flex; justify-content: center; align-items: center; min-height: 100vh; background: #0d1117;">
+    <span class="spinner sm"></span>
+  </div>
+</template>
\ No newline at end of file
diff --git a/app/pages/welcome/index.vue b/app/pages/welcome/index.vue
index d5faea3..43b31e7 100644
--- a/app/pages/welcome/index.vue
+++ b/app/pages/welcome/index.vue
@@ -1,7 +1,7 @@
 <script setup>
-import { ref } from 'vue'
+import { ref, onMounted } from 'vue'
 
-const { userToken } = useAuth()
+const { userToken, isAuthenticated, verifySession } = useAuth()
 
 const sfidInput = ref('')
 const step = ref(1)
@@ -11,6 +11,13 @@ const isSearching = ref(false)
 const isSubmitting = ref(false)
 const errorMessage = ref('')
 
+onMounted(async () => {
+  const valid = await verifySession()
+  if (!valid || !isAuthenticated.value) {
+    await navigateTo('/oauth', { replace: true })
+  }
+})
+
 const handleLookup = async () => {
   if (!sfidInput.value.trim()) return
 
@@ -62,7 +69,7 @@ const handleReset = () => {
 </script>
 
 <template>
-  <div class="login-wrapper">
+  <div v-if="isAuthenticated" class="login-wrapper">
     <section class="settings-panel" style="max-width: 480px; margin: 0 auto;">
       <div class="panel-header archivo-black">
         WELCOME