API Auth without Cookies

Re your Basic Auth issue: Htpasswd protection blocks panel login - #7 by Adspectus

The API needs authentication, either Basic Auth or session based. The alternative is custom endpoints, e.g. via Content Representations or custom (non-API) routes.