Instead of statically enabling basic auth on your controller by calling http_basic_authenticate_with, include HttpBasicAuthConfigurable in your controller, which allows you to configure basic auth through class attributes. This is particularly useful in certain use cases, such as allowing a host app to configure basic auth for a Rails engine it includes but doesn't control.