Secuting Shopware staging

Hi Guys!

I’m trying to figure it out but without success. What are your recommendations regarding securing staging environments with Basic Auth?

When I set BasicAuth with .htpasswd, everything works well, until I try to login to the admin area that uses API. Even if I type correct basic auth credentials the system still asks for them.

It looks that auth headers are not passed to REST endpoints. Do you have any recommendations here?

I know that Shopware has IP validation, but I don;t want to use that (sometimes I use different IP addresses as well as testers).