# Secuting Shopware staging

**URL:** <https://forum.shopware.com/t/secuting-shopware-staging/86317>\
**Category:** Shopware 6 (English)\
**Created:** [19. März 2021 um 10:57 UTC](https://forum.shopware.com/t/secuting-shopware-staging/86317 "2021-03-19T10:57:37Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dev](https://avatars.discourse-cdn.com/v4/letter/d/e8c25b/32.png) [@dev](https://forum.shopware.com/u/dev)\
**Post date:** [19. März 2021 um 10:57 UTC](https://forum.shopware.com/t/secuting-shopware-staging/86317/1 "2021-03-19T10:57:37Z")

</div>

Hi Guys!

I’m trying to figure it out but without success. What are your recommendations regarding securing staging environments with Basic Auth?

When I set BasicAuth with .htpasswd, everything works well, until I try to login to the admin area that uses API. Even if I type correct basic auth credentials the system still asks for them.

It looks that auth headers are not passed to REST endpoints. Do you have any recommendations here?

I know that Shopware has IP validation, but I don;t want to use that (sometimes I use different IP addresses as well as testers).