title: Apache2 Reverse Proxy to an end-point that requires BasicAuth but want to hide this from user
body: <p>Basically my scenario is that I have an internal website that requires a SINGLE hard-coded username and password to access (and this can't be turned off, only changed). I am exposing this website through a reverse proxy for various reasons (hiding the port, simplifying url, simplifying NAT, etc). </p>
  
  <p><strike>However, what I would like to do is be able to use Apache to handle the authentication so that: </strike></p>
  
  <ol>
  <li>I don't have to give out <strike>single</strike> password to everyone</li>
  <li><strike>I can have multiple usernames and passwords using Apache's BasicAuth</li>
  <li>For internal users, I don't have to prompt for a password</strike></li>
  </ol>
  
  <p><strong>EDIT: Second part about richer authentication has been moved to <a href="https://stackoverflow.com/questions/580032">new question</a></strong></p>
  
  <p>Here's more or less what I have now:</p>
  
  <pre><code>&lt;VirtualHost *:80&gt;
    ServerName sub.domain.com
  
    ProxyPass        / http://192.168.1.253:8080/endpoint
    ProxyPassReverse / http://192.168.1.253:8080/endpoint
  
    # The endpoint has a mandatory password that I want to avoid requiring users to type
    # I.e. something like this would be nice (but does not work)
  
    # ProxyPass        / http://username:password@192.168.1.253:8080/endpoint
    # ProxyPassReverse / http://username:password@192.168.1.253:8080/endpoint
  
    # Also need to be able to require a password to access proxy for people outside local subnet
    # However these passwords will be controlled by Apache using BasicAuth, not the ProxyPass endpoint
  
    # Ideas?
  &lt;/VirtualHost&gt;
  </code></pre>