Security issue: /stream is not secured

[h3rj4n]

I'm using this docker image to run the service. I want to open the service to the internet but the /stream URI is not secured using any password.

location /stream {
		proxy_set_header Authorization $http_authorization;
		proxy_read_timeout 1s;
		proxy_pass http://localhost:8889;
}

I don't have a solution right now. The 'normal' authentication uses PHP, the /stream URI proxies straight to the other service. There is no PHP in between, so no authentication.