diff --git a/config/config.go b/config/config.go
index 66385b4..005e4d6 100755
--- a/config/config.go
+++ b/config/config.go
@@ -11,10 +11,11 @@ import (
 )
 
 var (
-	Root string
-	Port string
-	Head string
-	Foot string
+	Root        string
+	Port        string
+	Head        string
+	Foot        string
+	OAuthServer string
 )
 
 func init() {
@@ -30,6 +31,7 @@ func Refresh() {
 	as.Append(args.STRING, "root", "root dir path", "./public")
 	as.Append(args.STRING, "port", "port to listen on", "39909")
 	as.Append(args.STRING, "wrap", "file with http header/footer", "./wrapper.html")
+	as.Append(args.STRING, "oauth", "oauth URL", "")
 	if err := as.Parse(); err != nil {
 		panic(err)
 	}
@@ -49,4 +51,5 @@ func Refresh() {
 	Port = ":" + strings.TrimPrefix(as.Get("port").GetString(), ":")
 	Head = string(bs[0])
 	Foot = string(bs[1])
+	OAuthServer = as.Get("oauth").GetString()
 }
diff --git a/server/routes.go b/server/routes.go
index 6fc786c..ae4c11b 100755
--- a/server/routes.go
+++ b/server/routes.go
@@ -2,7 +2,10 @@ package server
 
 import (
 	"fmt"
+	"local/notes-server/config"
+	"local/oauth2/oauth2client"
 	"local/router"
+	"log"
 	"net/http"
 )
 
@@ -14,19 +17,19 @@ func (s *Server) Routes() error {
 	}{
 		{
 			path:    fmt.Sprintf("notes/%s%s", wildcard, wildcard),
-			handler: s.notes,
+			handler: s.authenticate(s.notes),
 		},
 		{
 			path:    fmt.Sprintf("edit/%s%s", wildcard, wildcard),
-			handler: s.edit,
+			handler: s.authenticate(s.edit),
 		},
 		{
 			path:    fmt.Sprintf("submit/%s%s", wildcard, wildcard),
-			handler: s.submit,
+			handler: s.authenticate(s.submit),
 		},
 		{
 			path:    fmt.Sprintf("create/%s%s", wildcard, wildcard),
-			handler: s.create,
+			handler: s.authenticate(s.create),
 		},
 	}
 
@@ -37,3 +40,16 @@ func (s *Server) Routes() error {
 	}
 	return nil
 }
+
+func (s *Server) authenticate(foo http.HandlerFunc) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		if config.OAuthServer != "" {
+			err := oauth2client.Authenticate(config.OAuthServer, w, r)
+			if err != nil {
+				log.Println(err)
+				return
+			}
+		}
+		foo(w, r)
+	}
+}