Exposing Localhost and Mock Servers: Dev Tunnels, Cloudflare Tunnel, ngrok, Prism and WireMock.Net
Receiving the payment provider's webhook on Bookstore.Api at localhost needs a tunnel, but what protects the API is the signature, not the tunnel. We try a webhook endpoint with an HMAC signature and a timestamp tolerance locally with real output, compare Dev Tunnels, Cloudflare's quick tunnel and ngrok by their access settings, and build a Prism mock from OpenAPI that returns 401 and 422 plus a WireMock.Net carrier mock with scenarios and delays.
15 Nov 2026
·
14 min
·
8
