Do basic auth in Caddy, but delegating user/pass auth to kemal

config/Caddyfile

@@ -5,8 +5,11 @@
 }
 
 http://*:8888 {
-	basicauth /admin/* {
-		admin {$FAASO_PASSWORD}
+	forward_auth /admin/* http://127.0.0.1:3000 {
+		uri http://127.0.0.1:3000
+		copy_headers {
+			Authorization
+		}
 	}
 
 	handle_path /admin/terminal/* {

shard.lock

@@ -44,6 +44,10 @@ shards:
     git: https://github.com/kemalcr/kemal.git
     version: 1.5.0
 
+  kemal-basic-auth:
+    git: https://github.com/kemalcr/kemal-basic-auth.git
+    version: 1.0.0
+
   radix:
     git: https://github.com/luislavena/radix.git
     version: 0.4.1

shard.yml

@@ -28,6 +28,8 @@ dependencies:
     branch: add_exposed_ports
   kemal:
     github: kemalcr/kemal
+  kemal-basic-auth:
+    github: kemalcr/kemal-basic-auth
   rucksack:
     github: busyloop/rucksack
   inotify:

src/daemon/main.cr

@@ -5,9 +5,12 @@ require "./terminal.cr"
 require "compress/gzip"
 require "crystar"
 require "docr"
+require "kemal-basic-auth"
 require "kemal"
 require "uuid"
 
+basic_auth "admin", "admin"
+
 macro version
   "{{ `grep version shard.yml | cut -d: -f2` }}".strip()
 end

src/daemon/proxy.cr

@@ -36,8 +36,11 @@ module Proxy
 }
 
 http://*:8888 {
-	basicauth /admin/* {
-		admin {$FAASO_PASSWORD}
+	forward_auth /admin/* http://127.0.0.1:3000 {
+		uri http://127.0.0.1:3000
+		copy_headers {
+			Authorization
+		}
 	}
 
 	handle_path /admin/terminal/* {
@@ -46,8 +49,6 @@ http://*:8888 {
 	handle_path /admin/* {
 		reverse_proxy /* http://127.0.0.1:3000
 	}
-
-
 CONFIG
 
     funkos = Funko::Funko.from_docker