A cheatsheet for htaccess.
Create an htaccess file that requires authentication for everywhere except a whitelist of routes.