“Some online resources mention that HTTP Basic Authentication is deprecated, but that’s a misunderstanding.”
A ten-year-old Basic Auth experiment grew into a major internal admin system, and it still runs. Only credentials in the URL are deprecated. The header works in every browser. You give up logout and a pretty login page, and you skip weeks of building auth nobody asked for.