Access only authenticated users & Service in Worker

My url is public, but I want it to only be accessed by those who have the WordPress authentication cookie AND also a service in Worker.

How can I do this?

Decline for those who don’t have the authentication cookie OU is the Worker’s specific service.

Can Workers send a custom request header? So I could create a firewall rule for that.

Remembering that the Workers Service is in a different domain.