Protection for staging environments

Staging environments usually are not intended to be publicly available, most likely just for a few users and/or developers/testers.

For some you want IP whitelisting and for others you want to offer basic authentication.

The perfect flow would be:

IP whitelisted?
- Yes → access
- No → ask for basic auth