diff --git a/app/Http/Controllers/Api/WebHookController.php b/app/Http/Controllers/Api/WebHookController.php
index e8535ae..0d1c965 100644
--- a/app/Http/Controllers/Api/WebHookController.php
+++ b/app/Http/Controllers/Api/WebHookController.php
@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Api;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Http;
+use App\Models\Quote;
 
 
 class WebhookController extends Controller
@@ -25,5 +26,15 @@ class WebhookController extends Controller
 
     }
 
+    public function sendRandomQuote()
+    {
+        $quote = Quote::inRandomOrder()->first()->quote;
+        $this->webHookSend($quote);
+    }
+
+    public function test()
+    {
+        var_dump("secrets");
+    }
 
 }
\ No newline at end of file
diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index 494c050..ff4c2d4 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -64,5 +64,6 @@ class Kernel extends HttpKernel
         'signed' => \App\Http\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'headerauth' => \App\Http\Middleware\HeaderAuth::class
     ];
 }
diff --git a/app/Http/Middleware/HeaderAuth.php b/app/Http/Middleware/HeaderAuth.php
new file mode 100644
index 0000000..a933529
--- /dev/null
+++ b/app/Http/Middleware/HeaderAuth.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class HeaderAuth
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->header('X-BOTAUTH') !== env('X_BOTAUTH'))
+        {
+            return response('Unauthorized', 401);
+        }
+        return $next($request);
+    }
+}
diff --git a/routes/api.php b/routes/api.php
index bef3b31..e85d4da 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -15,8 +15,11 @@ use App\Http\Controllers\Api\WebHookController;
 |
 */
 
-Route::middleware('auth:sanctum')->get('/user', function (Request $request) {
-    return $request->user();
+Route::middleware('headerauth')->group(function () {
+    Route::get('/test', [WebHookController::class, 'test']);
+    Route::post('/sendQuote', [WebHookController::class, 'sendQuote']);
+    Route::post('/randomQuote', [WebHookController::class, 'sendRandomQuote']);
 });
 
-Route::post('/sendQuote', [WebHookController::class, 'sendQuote']);
\ No newline at end of file
+
+