diff --git a/src/shared/infrastructure/http/middleware/AuthMiddleware.ts b/src/shared/infrastructure/http/middleware/AuthMiddleware.ts
new file mode 100644
index 00000000..0a5bd78d
--- /dev/null
+++ b/src/shared/infrastructure/http/middleware/AuthMiddleware.ts
@@ -0,0 +1,69 @@
+import { Request, Response, NextFunction } from "express";
+import { ITokenService } from "../../../../modules/user/application/services/ITokenService";
+import { Result } from "../../../core/Result";
+
+export interface AuthenticatedRequest extends Request {
+  did?: string;
+}
+
+export class AuthMiddleware {
+  constructor(private tokenService: ITokenService) {}
+
+  public ensureAuthenticated() {
+    return async (req: AuthenticatedRequest, res: Response, next: NextFunction) => {
+      try {
+        // Extract token from Authorization header
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith("Bearer ")) {
+          return res.status(401).json({ message: "No access token provided" });
+        }
+
+        const token = authHeader.substring(7); // Remove 'Bearer ' prefix
+
+        // Validate token
+        const didResult = await this.tokenService.validateToken(token);
+
+        if (didResult.isErr() || !didResult.value) {
+          return res.status(403).json({ message: "Invalid or expired token" });
+        }
+
+        // Attach user DID to request for use in controllers
+        req.did = didResult.value;
+
+        // Continue to the controller
+        next();
+      } catch (error) {
+        return res.status(500).json({ message: "Authentication error" });
+      }
+    };
+  }
+
+  public optionalAuth() {
+    return async (req: AuthenticatedRequest, res: Response, next: NextFunction) => {
+      try {
+        // Extract token from Authorization header
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith("Bearer ")) {
+          // No token, but that's okay - continue without authentication
+          return next();
+        }
+
+        const token = authHeader.substring(7); // Remove 'Bearer ' prefix
+
+        // Validate token
+        const didResult = await this.tokenService.validateToken(token);
+
+        if (didResult.isOk() && didResult.value) {
+          // Attach user DID to request for use in controllers
+          req.did = didResult.value;
+        }
+        
+        // Continue to the controller regardless of token validity
+        next();
+      } catch (error) {
+        // Continue without authentication in case of error
+        next();
+      }
+    };
+  }
+}
diff --git a/src/shared/infrastructure/http/middleware/index.ts b/src/shared/infrastructure/http/middleware/index.ts
new file mode 100644
index 00000000..f504f2fe
--- /dev/null
+++ b/src/shared/infrastructure/http/middleware/index.ts
@@ -0,0 +1 @@
+export * from './AuthMiddleware';