Yeah, you don’t need to extend Caddy at all for that.

Add a properly-formatted Authorization header to any requests you make to the server and it’ll work. See Wikipedia page for header string format:

en.wikipedia.org/…/Basic_access_authentication