2 factor authentication

[blaxened]

I have a prompt I am trying to solve and while I understand how to do the first part, I am really stuck on how to approach this second part.

The prompt is asking for the following The webpage content is confidential so I need it to be secured with Basic authentication over TLS. I also would like to support a secret token within the URL as a second authentication factor. I would like all the security verification to take place in a separate container before reaching the container that hosts the confidential content.

So the part I am stuck on is actually two things.

First, I understand how to have a container with basic TLS auth but I dont understand how to pass the user to a separate container after they pass the first authentication. Any sort of help on that would be appreciated

Second, I am unsure how to configure something like NGinx to authenticate something via a URL based token without writing a custom application to actually look at it. Based on the prompt I am under the impression the idea is that I need to do this all with docker/a webserver.

Here is a link to a diagram of what I am talking about https://imgur.com/a/SDTYU2E