ngrok Becomes Identity Aware with App Users

blog.ngrok.com

Is the vision here that eventually I just have ngrok sit in front of my web app server(s) to handle authentication, rather than doing it at the app layer? And then ngrok in theory forwards on headers or whatever info I need for the authenticated users, like a middleware sitting on top?

That's one option.

The larger problem to solve is the sheer volume of legacy apps that people are afraid to touch due to "they're working, don't touch it!" or their source, team, etc aren't available anymore. Putting authN/Z, IP restrictions, etc in front without modifying them is powerful.

Then you can do the same for IoT devices in seconds.

Reply on news.ycombinator.com