Solutionunvalidated
Use ngrok’s `--verify-webhook` (and also verify the webhook signature/secret in the Flask app) to reject requests without the correct Shopify signing headers. Treat the endpoint as publicly reachable and enforce authentication/verification in your server.
3899351d-d154-4f36-b4bf-5e417e56e896
Use ngrok’s --verify-webhook (and also verify the webhook signature/secret in the Flask app) to reject requests without the correct Shopify signing headers. Treat the endpoint as publicly reachable and enforce authentication/verification in your server.