diff --git a/internal/middleware/jwt.go b/internal/middleware/jwt.go
index a8eebd1..b6bab26 100644
--- a/internal/middleware/jwt.go
+++ b/internal/middleware/jwt.go
@@ -48,6 +48,40 @@ func JWTAuth(accountRepo *account.AccountRepository) gin.HandlerFunc {
 	}
 }
 
+func SoftJWTAuth(accountRepo *account.AccountRepository) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		authHeader := c.GetHeader("Authorization")
+		if authHeader == "" {
+			c.Next()
+			return
+		}
+
+		parts := strings.SplitN(authHeader, " ", 2)
+		if len(parts) != 2 || !strings.EqualFold(parts[0], "Bearer") {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "invalid authorization header"})
+			return
+		}
+
+		tokenString := parts[1]
+
+		claims, err := auth.ParseToken(tokenString)
+		if err != nil {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "invalid or expired token"})
+			return
+		}
+
+		accountInfo, err := accountRepo.FindByID(c.Request.Context(), claims.AccountID)
+		if err != nil || accountInfo.Token == "" || accountInfo.Token != tokenString {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "token has been revoked"})
+			return
+		}
+
+		c.Set("accountID", claims.AccountID)
+		c.Set("username", claims.Username)
+
+		c.Next()
+	}
+}
 func GetAccountID(c *gin.Context) (uint, error) {
 	uidValue, exists := c.Get("accountID")
 	if !exists {