Best Practices for Protecting Routes with Tokens in Cookies?

Hi everyone!

How do you go about protecting routes when tokens are stored in cookies? Do you typically create an additional endpoint to validate the token and user? Would love to hear your approaches!