Squarespace has a featured for "site-wide password protection" which is useful for staging unlaunched websites for stakeholders to review. This would help guard against any potential leaks.

Figma also has a feature similar to this.

We currently have to create a custom express.js server with an authentication middleware, but this is undesirable for several reasons:

• We'd have to re-create all of firebase hosting's serving features (i18n fallbacks, redirects, pretty urls, etc.)
• We can't easily test endpoints that are proxied to Functions/GCR