I need to exclude one Url (or even better one prefix) from normal htaccess Basic Auth protection. Something like /callbacks/myBank or /callbacks/.*
/callbacks/myBank
/callbacks/.*
why don't you just use basic auth the way it was intended?
user:password@domain.com/callbacks/etc