In Apache, I use the following htaccess file to require basic authentication on POST requests only. On litespeed, this same block requires basic auth for all requests, including GET which I want to make openly available.
<Limit POST>
AuthType Basic
AuthName "Restricted Content"...