- PIHTTPServerBasicAuth: parse Authorization: Basic header, validate credentials via callback - PIHTTPServerProtected: wrap any handler with auth check (basic or custom token) - Integration tests for both modules (12 test cases)