I have a Geoserver instance on a docker container that sits on an Ubuntu host. At the moment, requests to the Geoserver container are forwarded on through the host's Apache web server. I am making these requests from a javascript web application.
I would like to secure some of my layers on Geoserver.
My question: how can I provide the proper credentials (presumably, username and password) to access these layers from my javascript app without displaying them in plain view in my source code?