Apache has had form-based authentication for about 10 years: https://httpd.apache.org/docs/2.4/mod/mod_auth_form.html