diff --git a/app/Http/Middleware/Server.php b/app/Http/Middleware/Server.php
index 6feef83..1cec74f 100644
--- a/app/Http/Middleware/Server.php
+++ b/app/Http/Middleware/Server.php
@@ -18,6 +18,11 @@ class Server
      */
     public function handle(Request $request, Closure $next, $node_type = null)
     {
+        $token = $request->input('token');
+        if (empty($token)) {
+            throw new ApiException('token is null',403);
+        }
+
         // alias
         $aliasTypes = [
             'v2ray' => 'vmess',