All of the big web servers have some mechanism for implementing server side basic auth (which I assume OP is referencing with ".htaccess". Nginx for instance:

All of the big web servers have some mechanism for implementing server side basic auth (which I assume OP is referencing with ".htaccess". Nginx for instance: https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/ https://docs.nginx.com/nginx/admin-guide/security-controls/c...