multiple custom post types and auth.

Hi there

two queries.

1. is there a way to enable basic auth for some route/endpoint that represents a custom post type? I understand you’re only enabling the rest-api but my theme devs didn’t bother to implement even basic auth. Please help.

2. My theme generates a post (a custom post) for each sale that takes place,I am using integromat and calling WP API order route/endpoint every 15 minutes. What’s the best way to check for new orders (posts).