What would be the alternative to fix "Access forbidden 404" on my test site while using basic_authentication module for rest resource?
You can send in the user and password parameters with your API call.

user:password@http://site-url.tld


this way you can still communicate with the app whilst keeping it behind basic auth