I imagine the best approach would be to investigate the auth stac extension https://github.com/stac-extensions/authentication and how we can pass these arguments