At the moment it is already possible to run a provider using HTTP basic auth, but it comes with a few caveats, like requiring that the username and password are written as username:password in one header.
Maybe it would be better to add a dedicated "HTTP basic auth" option instead of trying to approximate it using the general header configuration.