If you’ve ever used Apache2 and .htaccess with the “Options Indexes” value to show the content listing of a directory. You would know that unfortunately Apache2 doesn’t show folders that are forbidden or password protected.
What can you do about it? You could try using “IndexOptions ShowForbidden” which states “If specified, Apache will show files normally hidden because the subrequest returned HTTP_UNAUTHORIZED
or HTTP_FORBIDDEN" however this won't show Folders that are protected for some reason. So at this point there is no way to show passworded folders.