Authentication of the DeStor REST API

[xinaxu]

Authentication of the DeStor REST API itself came up. This can be done using off the shelf HTTP reverse proxy. We need docs, guidelines and maybe a demo set up on this. Seems like a low hanging fruit

We need to talk to ianconsolata on slack for use cases

[gammazero]

So, just get a certificate and terminate TLS with nginx?

[masih]

This is than TLS termination. Here is a user story:
"As an ISV I want to be able to control who can call the Motion REST API".

This does not require much implementation; it should be achievable using the existing HTTP control plane, e.g. basic auth, JWT auth, etc.

What's asked here is an example, or documentation on how one would go about doing this.