Authenticated reverse-proxy (following #2463)

[enugentdt]

What challenge are you facing?

JavaScript API does not function behind an authenticated reverse proxy. I'm opening this as a feature request because it is not explicitly a bug, as Concourse very specifically does not have this functionality.

What would make this better?

Possibly, passing all cookies through JS requests? I've gotten around it by whitelisting my IP address in the reverse proxy, but it doesn't solve public facing access. For example, my reverse proxy has the cookie pritunl-zero, which it checks against. Would it be possible to pass all cookies with the JS api?

Are you interested in implementing this yourself?

I can try to add this myself, if it would help. I'd have to educate myself on the JS api client, though.