Stephan van Rooij
@svrooij.io
I'll talk about APIs, Security and building applications in #dotnet
https://svrooij.io | Microsoft MVP Security & Graph | wintuner.app | https://mvp.microsoft.com/en-US/mvp/profile/cc128f12-003f-ed11-bba3-000d3a197333
https://svrooij.io | Microsoft MVP Security & Graph | wintuner.app | https://mvp.microsoft.com/en-US/mvp/profile/cc128f12-003f-ed11-bba3-000d3a197333
Pinned
Stephan van Rooij
@svrooij.io
· Dec 4
Open-source explained for none developers
I recently saw a tweet from a well respected open-source developer, that someone was trying to use him as a free helpdesk. This is a common problem in the open-source community, and it’s a problem tha...
svrooij.io
I've built several open source packages, some touching almost 500.000 downloads. But I feel that not everybody understands #OSS (open source software). We need your help in making the community better. svrooij.io/2024/09/18/o... #community
Any Bacardi fans here?
Selling my Bacardi bomber jacket, any profits go to a good cause
link.marktplaats.nl/m2344271314?...
Selling my Bacardi bomber jacket, any profits go to a good cause
link.marktplaats.nl/m2344271314?...
≥ Bacardi bomberjack XL Cuba Libre (goede doel) — Jassen | Winter — Marktplaats
Koop nu deze one of a kind Bacardi bomberjack (maat XL) en krijg er er een lege 3L Bacardi fles bij.Dit zijn echt collectors items. Van deze jas zit in
link.marktplaats.nl
December 12, 2025 at 6:01 PM
Any Bacardi fans here?
Selling my Bacardi bomber jacket, any profits go to a good cause
link.marktplaats.nl/m2344271314?...
Selling my Bacardi bomber jacket, any profits go to a good cause
link.marktplaats.nl/m2344271314?...
Tell me how old you are, without telling me your age? Let me start. I have this box in the attic with these things in it. (Which I bring to the @homecomputermuseum.computermuseum.social.ap.brid.gy next week)
December 12, 2025 at 1:18 PM
Tell me how old you are, without telling me your age? Let me start. I have this box in the attic with these things in it. (Which I bring to the @homecomputermuseum.computermuseum.social.ap.brid.gy next week)
Reposted by Stephan van Rooij
A new way to grow as a speaker.
EngageTime will soon give you clear analytics across all your sessions.
See your impact, your ratings, your reactions.
Understand what resonates so you can step on stage with even more confidence.
engagetime.live
EngageTime will soon give you clear analytics across all your sessions.
See your impact, your ratings, your reactions.
Understand what resonates so you can step on stage with even more confidence.
engagetime.live
November 19, 2025 at 4:57 PM
A new way to grow as a speaker.
EngageTime will soon give you clear analytics across all your sessions.
See your impact, your ratings, your reactions.
Understand what resonates so you can step on stage with even more confidence.
engagetime.live
EngageTime will soon give you clear analytics across all your sessions.
See your impact, your ratings, your reactions.
Understand what resonates so you can step on stage with even more confidence.
engagetime.live
Want to test your api without disabling authentication?
Check out Identity Proxy, which allows you to hack your api for integration testing!
svrooij.io/2025/11/19/i...
#security #dotnet #development
Check out Identity Proxy, which allows you to hack your api for integration testing!
svrooij.io/2025/11/19/i...
#security #dotnet #development
Introducing Identity Proxy
Discover Identity Proxy: a tool for testing APIs with JWT authentication without disabling security. Simplify your API testing process today!
svrooij.io
November 19, 2025 at 5:47 PM
Want to test your api without disabling authentication?
Check out Identity Proxy, which allows you to hack your api for integration testing!
svrooij.io/2025/11/19/i...
#security #dotnet #development
Check out Identity Proxy, which allows you to hack your api for integration testing!
svrooij.io/2025/11/19/i...
#security #dotnet #development
Did we need another nugget package? I sure think so! Check out this source generator that will help you automatically register your minimal endpoints. github.com/svrooij/dotn...
Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
GitHub - svrooij/dotnet-endpoint-mapper: Dotnet source generator to automatically discover all endpoints in your project.
Dotnet source generator to automatically discover all endpoints in your project. - svrooij/dotnet-endpoint-mapper
github.com
October 27, 2025 at 5:44 PM
Did we need another nugget package? I sure think so! Check out this source generator that will help you automatically register your minimal endpoints. github.com/svrooij/dotn...
Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
Reposted by Stephan van Rooij
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory.
This is a cloud only Tenant!
This is a cloud only Tenant!
October 25, 2025 at 10:08 PM
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory.
This is a cloud only Tenant!
This is a cloud only Tenant!
Reposted by Stephan van Rooij
Want to present at our new Stockholm SQL usergroup? We're doing in-person sessions about once per month.
If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
Call for speakers: Stockholm SQL 2025-2026 - https://us7.campaign-archive.com/?u=b8db1e2ab2a0ee1aa69c8bb27&id=12aea8068e
October 20, 2025 at 8:23 AM
Want to present at our new Stockholm SQL usergroup? We're doing in-person sessions about once per month.
If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
Are you still using the WithSecret or WithCertificate methods on the #microsoft identity client? Check out this post to see how that can be replaced with a managed identity. svrooij.io/2025/10/10/s...
#security #development
#security #development
Secretless confidential applications
The Microsoft Authentication Library (MSAL) is one of my favorite libraries. It eases the process of getting tokens for Entra ID protected resources, and since most developers seem to struggle with ge...
svrooij.io
October 11, 2025 at 9:10 AM
Are you still using the WithSecret or WithCertificate methods on the #microsoft identity client? Check out this post to see how that can be replaced with a managed identity. svrooij.io/2025/10/10/s...
#security #development
#security #development
@vandervalk.pro Is all ready for the last talk of the day at #netassemble
"Dont let your access tokens be stolen" #security
"Dont let your access tokens be stolen" #security
October 2, 2025 at 5:28 PM
@vandervalk.pro Is all ready for the last talk of the day at #netassemble
"Dont let your access tokens be stolen" #security
"Dont let your access tokens be stolen" #security
#netassemble first session by @wildermuth.com at #mstack "you can be bad everywhere" is the best quote from this talk so far. #community #dotnet
October 2, 2025 at 11:19 AM
#netassemble first session by @wildermuth.com at #mstack "you can be bad everywhere" is the best quote from this talk so far. #community #dotnet
Fourth edition of #netassemble by #MStack
October 2, 2025 at 11:05 AM
Fourth edition of #netassemble by #MStack
Maarten staat klaar voor zijn sessie op deze eerste #diwug na de vakantie
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
September 23, 2025 at 6:22 PM
Maarten staat klaar voor zijn sessie op deze eerste #diwug na de vakantie
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
Reposted by Stephan van Rooij
Thank you #Keeyns for hosting us tonight! We have a full house, listening to Thomas Huijer's talk "Exploring C# Source Generators".
#dotnetzuid
#dotnetzuid
September 22, 2025 at 4:40 PM
Thank you #Keeyns for hosting us tonight! We have a full house, listening to Thomas Huijer's talk "Exploring C# Source Generators".
#dotnetzuid
#dotnetzuid
September 17, 2025 at 2:38 PM
Reposted by Stephan van Rooij
Did you know you can leverage the Azure DevOps Rest API in Power Automate to run actions that are not available in Power Automate?🚀
In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
September 13, 2025 at 3:30 PM
Did you know you can leverage the Azure DevOps Rest API in Power Automate to run actions that are not available in Power Automate?🚀
In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
Reposted by Stephan van Rooij
Unlock the power of raw Kestrel! Learn when to skip WebApplicationBuilder and directly leverage Kestrel for optimized .NET apps. Ideal for low-level control and performance tuning. #DotNet #Kestrel
When You Don’t Need WebApplicationBuilder: Raw Kestrel in Action
You’ll rarely wake up thinking, “Today I’m building a .NET web app without WebApplicationBuilder” — but there’s no harm in experimenting…
medium.com
September 8, 2025 at 6:15 PM
Anyone ever used RapiDoc? rapidocweb.com to provide developer docs about your api? Alternative to Swagger and Scalar. How not decided which one is the best. #openapi #developer
RapiDoc - Web Component based Swagger & OpenAPI Spec Viewer
RapiDoc is Web Component for viewing Swagger & OpenAPI Spec. Supports themes, styling and various rendering styles
rapidocweb.com
August 30, 2025 at 10:17 AM
Anyone ever used RapiDoc? rapidocweb.com to provide developer docs about your api? Alternative to Swagger and Scalar. How not decided which one is the best. #openapi #developer
I just used the "Start from backup" flow to migrate @home-assistant.io from one machine to the next. And WOW, I never had such a smooth migration. 🥇 Other companies can learn something from this!!
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues
Common tasks - installation independent
Common tasks
www.home-assistant.io
August 28, 2025 at 11:08 AM
I just used the "Start from backup" flow to migrate @home-assistant.io from one machine to the next. And WOW, I never had such a smooth migration. 🥇 Other companies can learn something from this!!
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues
Building an application that used role based access control? Here is a nice trick to not have to built any user and or role management things in your app. Just off-load this to the remote security team using Microsoft Entra. svrooij.io/2025/08/27/e...
Let's talk App Roles
App Roles in Microsoft Entra are under utilized and deserve more attention, this guide will help you get started
svrooij.io
August 28, 2025 at 10:21 AM
Building an application that used role based access control? Here is a nice trick to not have to built any user and or role management things in your app. Just off-load this to the remote security team using Microsoft Entra. svrooij.io/2025/08/27/e...
Reposted by Stephan van Rooij
Zelf een video maken om je eigen straatje schoon te vegen in plaats van vragen van journalisten te beantwoorden: bij Follow the Money kennen we dit trucje maar al te goed. Mensen onder vuur verspreiden zo hún versie van de feiten om kritiek te ontwijken. Hoe gaat FTM hiermee om?
Wantrouw mensen onder vuur die zelf ‘het ware verhaal’ vertellen
Follow the Money - Platform voor onderzoeksjournalistiek
www.ftm.nl
August 24, 2025 at 7:05 AM
Zelf een video maken om je eigen straatje schoon te vegen in plaats van vragen van journalisten te beantwoorden: bij Follow the Money kennen we dit trucje maar al te goed. Mensen onder vuur verspreiden zo hún versie van de feiten om kritiek te ontwijken. Hoe gaat FTM hiermee om?
Reposted by Stephan van Rooij
A rare, but highly welcome change. Microsoft changed the license requirement for Token protection from Entra ID P2 to P1.
This will protect more customers in the long run and lead to a more secure ecosystem.
learn.microsoft.com/en-us/entra/...
This will protect more customers in the long run and lead to a more secure ecosystem.
learn.microsoft.com/en-us/entra/...
Microsoft Entra Conditional Access token protection explained - Microsoft Entra ID
Learn how to secure your environment with token protection in Microsoft Entra Conditional Access policies.
learn.microsoft.com
July 24, 2025 at 4:39 AM
A rare, but highly welcome change. Microsoft changed the license requirement for Token protection from Entra ID P2 to P1.
This will protect more customers in the long run and lead to a more secure ecosystem.
learn.microsoft.com/en-us/entra/...
This will protect more customers in the long run and lead to a more secure ecosystem.
learn.microsoft.com/en-us/entra/...
Reposted by Stephan van Rooij
Recently, we announced the finalists for the most special of the #GoldenClippyAwards The #ChuckNorris award is for heroes in multiple areas: @nathanmcnulty.com @fabian.bader.cloud @bindertech.se @knudsenm.bsky.social@mortenknudsen.net Congratulate them/reshare for these rockstars! #MVPBuzz #WPNinjas
August 11, 2025 at 12:48 AM
Recently, we announced the finalists for the most special of the #GoldenClippyAwards The #ChuckNorris award is for heroes in multiple areas: @nathanmcnulty.com @fabian.bader.cloud @bindertech.se @knudsenm.bsky.social@mortenknudsen.net Congratulate them/reshare for these rockstars! #MVPBuzz #WPNinjas
Have a Volvo and using @home-assistant.io ? The Volvo On Call integration is broken. It has been replaced by a new integration that connects to the new api. I'm now creating the depreciation message.
August 22, 2025 at 7:41 AM
Have a Volvo and using @home-assistant.io ? The Volvo On Call integration is broken. It has been replaced by a new integration that connects to the new api. I'm now creating the depreciation message.
Did you know you can "pre-provision" application access to your sharepoint group site using the `resourceBehaviorOptions` array when you create a group? add `appRoleForSite:{appId}:fullcontrol`
Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/...
#graph #microsoft
Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/...
#graph #microsoft
group resource type - Microsoft Graph v1.0
Represents a Microsoft Entra group, which can be a Microsoft 365 group, or a security group.
learn.microsoft.com
August 21, 2025 at 12:56 PM
Did you know you can "pre-provision" application access to your sharepoint group site using the `resourceBehaviorOptions` array when you create a group? add `appRoleForSite:{appId}:fullcontrol`
Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/...
#graph #microsoft
Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/...
#graph #microsoft