Token Auth in Reversal Proxy and Firewall rules

Hi, I need to create token authentication (with a simple dashboard) to enable and disable, we also need to make settings on the firewall to block some GET requests for some routes. It is necessary to change an information in the header of the request if the authentication token is valid. My server is Ubuntu 18.04 running in vultr company. Awaiting your offer, Thanks