diff --git a/achievements.py b/achievements.py
index e455199..86e21ff 100644
--- a/achievements.py
+++ b/achievements.py
@@ -1,6 +1,8 @@
-from app import app
+from app import app, db
 from models import Achievement
 
+from flask_login import current_user, login_required
+
 import json
 
 @app.route("/achievement/<id>")
@@ -8,4 +10,30 @@ def get_achievement(id):
     achievement = Achievement.query.filter_by(id=id).first()
     if not achievement:
         return "{}"
-    return json.dumps(achievement.to_obj())
\ No newline at end of file
+    return json.dumps(achievement.to_obj())
+
+@app.route("/achievement/<id>/endorse")
+@login_required
+def endorse_achievement(id):
+    achievement = Achievement.query.filter_by(id=id).first()
+    if not achievement:
+        return "Invalid id"
+    if current_user in achievement.endorsed_by:
+        return "Already endorsed"
+    achievement.endorsed_by.append(current_user)
+    db.session.add(achievement)
+    db.session.commit()
+    return "OK"
+
+@app.route("/achievement/<id>/unendorse")
+@login_required
+def unendorse_achievement(id):
+    achievement = Achievement.query.filter_by(id=id).first()
+    if not achievement:
+        return "Invalid id"
+    if current_user not in achievement.endorsed_by:
+        return "Can't unendorse if you never endorsed..."
+    achievement.endorsed_by.remove(current_user)
+    db.session.add(achievement)
+    db.session.commit()
+    return "OK"
\ No newline at end of file