March 2022 Summaries

Ngrok, Inc. has achieved a milestone by completing the System and Organizational Controls (SOC) 2 Type 1 examination, which confirms that it maintains effective security controls over its Secure Introspectable Tunnels System. This certification, conducted by BARR Advisory, P.A., is part of ngrok's commitment to building trust and simplifying internet connectivity for developers, as envisioned by its founder and CEO, Alan Shreve. To further strengthen its Security, Risk, and Trust program, ngrok has appointed Arianna Willett, who has extensive experience in governance, risk, and compliance from her previous roles at Okta and Twilio. The SOC 2 Type 1 report, a key step in establishing security assurance for current and potential customers, is available through ngrok's sales contacts. BARR Advisory, known for providing cloud-based security and compliance solutions, supports companies in navigating complex regulatory landscapes across various industries.

Webhooks have become a standard in web development, facilitating message transmission between systems while remaining agnostic to the underlying technologies, primarily using HTTP requests with a predictable structure. They are particularly beneficial in distributed applications where traditional communication methods are limited, allowing for seamless interaction across different platforms. The anatomy of a webhook consists of a URL, headers, and a payload, with headers playing a crucial role in enhancing functionality by tracking transaction details and establishing sender credentials. Security is a significant concern, as inadequate measures can lead to vulnerabilities like spoofing attacks. To mitigate these risks, developers are advised to use HTTPS for secure transport, authenticate requests using IP address filtering or handshake protocols, and validate payloads through methods like HMAC, which combines authentication and payload verification. This comprehensive approach to security ensures that webhooks remain a reliable method for integrating and automating workflows across diverse applications.

ngrok` is an open-source tool that allows developers to expose local APIs to the internet, making it easier to automate tasks with `Zapier`, a cloud-based integration platform as a service (iPaaS). This tutorial demonstrates how to connect Zapier to remote APIs using ngrok to bridge the gap between publicly available cloud-based systems and internal systems. By following this guide, users can automate tasks such as filling spreadsheets, reacting to events, or grabbing status updates without manual intervention. The process involves creating a sample app that uses ngrok to expose a remote API, adding authentication to the connection, and integrating Zapier with Google Sheets to automate data retrieval and update.

VSCode is a popular integrated development environment (IDE) known for its speed, community support, and extensive command palette functionality. The VSCode ngrok extension allows users to launch and manage their ngrok tunnels directly from the IDE's command palette, streamlining development and deployment processes. With the extension installed, developers can easily create and share public URLs for their applications, making it easier to test and showcase their work. The tutorial demonstrates how to set up the extension, install a sample Express.js app, launch the first tunnel, and customize ngrok settings to suit individual needs. By leveraging this integration, developers can enhance their productivity, collaboration, and overall development experience.