diff --git a/server/web/auth/auth.go b/server/web/auth/auth.go
new file mode 100644
index 0000000..4401d8c
--- /dev/null
+++ b/server/web/auth/auth.go
@@ -0,0 +1,32 @@
+package auth
+
+import (
+	"encoding/json"
+	"io/ioutil"
+	"path/filepath"
+
+	"github.com/gin-gonic/gin"
+
+	"server/settings"
+)
+
+func SetupAuth(engine *gin.Engine) *gin.RouterGroup {
+	if !settings.HttpAuth {
+		return nil
+	}
+	accs := getAccounts()
+	if accs == nil {
+		return nil
+	}
+	return engine.Group("/", gin.BasicAuth(accs))
+}
+
+func getAccounts() gin.Accounts {
+	buf, err := ioutil.ReadFile(filepath.Join(settings.Path, "accs.db"))
+	if err != nil {
+		return nil
+	}
+	var accs gin.Accounts
+	json.Unmarshal(buf, &accs)
+	return accs
+}