// use case
Expose your Spring Boot app on a public URL
Spring Boot's embedded Tomcat/Netty binds locally. You need a public URL for Stripe, Twilio, OAuth — and you don't want to deploy on every code change. lrok skips the deploy.
Run Spring Boot
$ ./mvnw spring-boot:run # :8080Tunnel
$ lrok http 8080Trust forwarded headers
In application.properties: server.forward-headers-strategy=native. Spring then reads X-Forwarded-Proto correctly so HttpServletRequest#isSecure() returns true.
// why lrok for this
Spring's CSRF + Spring-Security cookie-based sessions need https to set the Secure flag. lrok terminates real TLS so the dev posture matches prod exactly.