Problem with loading .jsons with HTTP basic auth

[nudelfabrik]

When providing the .jsons with HTTP-Basic auth, Chrome warns about "loading insecure scripts" and needs authentication. Safari issues no warning, but does not load data.

nginx.conf

location /statusboard {
    autoindex on; 
    auth_basic "Restricted"; 
    auth_basic_user_file $PATH/.passwd; 
} 
location /statusboard/web-status { 
    location ~* /statusboard/web-status/.*.php$ { 
        fastcgi_split_path_info ^(.+\.php)(.*)$; 
        fastcgi_pass   unix:/tmp/php5-fpm.sock; 
        fastcgi_index  index.php; 
        include fastcgi_params; 
        fastcgi_param   SCRIPT_FILENAME  $document_root$fastcgi_script_name; 
    } 
}

[Fidi]

There is yet another problem: The restricted section of the parent directory does not allow access even if relative paths are used such as "../load.json".

Needs further investigation