Stephan van Rooij
svrooij.io
Stephan van Rooij
@svrooij.io
I'll talk about APIs, Security and building applications in #dotnet
https://svrooij.io | Microsoft MVP Security & Graph | wintuner.app | https://mvp.microsoft.com/en-US/mvp/profile/cc128f12-003f-ed11-bba3-000d3a197333
Pinned
I've built several open source packages, some touching almost 500.000 downloads. But I feel that not everybody understands #OSS (open source software). We need your help in making the community better. svrooij.io/2024/09/18/o... #community
Open-source explained for none developers
I recently saw a tweet from a well respected open-source developer, that someone was trying to use him as a free helpdesk. This is a common problem in the open-source community, and it’s a problem tha...
svrooij.io
Did we need another nugget package? I sure think so! Check out this source generator that will help you automatically register your minimal endpoints. github.com/svrooij/dotn...
Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
GitHub - svrooij/dotnet-endpoint-mapper: Dotnet source generator to automatically discover all endpoints in your project.
Dotnet source generator to automatically discover all endpoints in your project. - svrooij/dotnet-endpoint-mapper
github.com
October 27, 2025 at 5:44 PM
Reposted by Stephan van Rooij
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory.

This is a cloud only Tenant!
October 25, 2025 at 10:08 PM
Reposted by Stephan van Rooij
Want to present at our new Stockholm SQL usergroup? We're doing in-person sessions about once per month.

If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
October 20, 2025 at 8:23 AM
Are you still using the WithSecret or WithCertificate methods on the #microsoft identity client? Check out this post to see how that can be replaced with a managed identity. svrooij.io/2025/10/10/s...
#security #development
Secretless confidential applications
The Microsoft Authentication Library (MSAL) is one of my favorite libraries. It eases the process of getting tokens for Entra ID protected resources, and since most developers seem to struggle with ge...
svrooij.io
October 11, 2025 at 9:10 AM
@vandervalk.pro Is all ready for the last talk of the day at #netassemble
"Dont let your access tokens be stolen" #security
October 2, 2025 at 5:28 PM
#netassemble first session by @wildermuth.com at #mstack "you can be bad everywhere" is the best quote from this talk so far. #community #dotnet
October 2, 2025 at 11:19 AM
Fourth edition of #netassemble by #MStack
October 2, 2025 at 11:05 AM
Maarten staat klaar voor zijn sessie op deze eerste #diwug na de vakantie
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
September 23, 2025 at 6:22 PM
Reposted by Stephan van Rooij
Thank you #Keeyns for hosting us tonight! We have a full house, listening to Thomas Huijer's talk "Exploring C# Source Generators".
#dotnetzuid
September 22, 2025 at 4:40 PM
From VM to Markdown, ditching #wordpress by @energy164.online at #azurefest
September 17, 2025 at 2:38 PM
#azurefest 2025 let's go
September 17, 2025 at 11:53 AM
Reposted by Stephan van Rooij
Did you know you can leverage the Azure DevOps Rest API in Power Automate to run actions that are not available in Power Automate?🚀

In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
September 13, 2025 at 3:30 PM
Reposted by Stephan van Rooij
Unlock the power of raw Kestrel! Learn when to skip WebApplicationBuilder and directly leverage Kestrel for optimized .NET apps. Ideal for low-level control and performance tuning. #DotNet #Kestrel
When You Don’t Need WebApplicationBuilder: Raw Kestrel in Action
You’ll rarely wake up thinking, “Today I’m building a .NET web app without WebApplicationBuilder” — but there’s no harm in experimenting…
medium.com
September 8, 2025 at 6:15 PM
Anyone ever used RapiDoc? rapidocweb.com to provide developer docs about your api? Alternative to Swagger and Scalar. How not decided which one is the best. #openapi #developer
RapiDoc - Web Component based Swagger & OpenAPI Spec Viewer
RapiDoc is Web Component for viewing Swagger & OpenAPI Spec. Supports themes, styling and various rendering styles
rapidocweb.com
August 30, 2025 at 10:17 AM
I just used the "Start from backup" flow to migrate @home-assistant.io from one machine to the next. And WOW, I never had such a smooth migration. 🥇 Other companies can learn something from this!!
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues
Common tasks - installation independent
Common tasks
www.home-assistant.io
August 28, 2025 at 11:08 AM
Building an application that used role based access control? Here is a nice trick to not have to built any user and or role management things in your app. Just off-load this to the remote security team using Microsoft Entra. svrooij.io/2025/08/27/e...
Let's talk App Roles
App Roles in Microsoft Entra are under utilized and deserve more attention, this guide will help you get started
svrooij.io
August 28, 2025 at 10:21 AM
Reposted by Stephan van Rooij
Zelf een video maken om je eigen straatje schoon te vegen in plaats van vragen van journalisten te beantwoorden: bij Follow the Money kennen we dit trucje maar al te goed. Mensen onder vuur verspreiden zo hún versie van de feiten om kritiek te ontwijken. Hoe gaat FTM hiermee om?
Wantrouw mensen onder vuur die zelf ‘het ware verhaal’ vertellen
Follow the Money - Platform voor onderzoeksjournalistiek
www.ftm.nl
August 24, 2025 at 7:05 AM
Reposted by Stephan van Rooij
A rare, but highly welcome change. Microsoft changed the license requirement for Token protection from Entra ID P2 to P1.

This will protect more customers in the long run and lead to a more secure ecosystem.

learn.microsoft.com/en-us/entra/...
Microsoft Entra Conditional Access token protection explained - Microsoft Entra ID
Learn how to secure your environment with token protection in Microsoft Entra Conditional Access policies.
learn.microsoft.com
July 24, 2025 at 4:39 AM
Reposted by Stephan van Rooij
Recently, we announced the finalists for the most special of the #GoldenClippyAwards The #ChuckNorris award is for heroes in multiple areas: @nathanmcnulty.com @fabian.bader.cloud @bindertech.se @knudsenm.bsky.social@mortenknudsen.net Congratulate them/reshare for these rockstars! #MVPBuzz #WPNinjas
August 11, 2025 at 12:48 AM
Have a Volvo and using @home-assistant.io ? The Volvo On Call integration is broken. It has been replaced by a new integration that connects to the new api. I'm now creating the depreciation message.
August 22, 2025 at 7:41 AM
Did you know you can "pre-provision" application access to your sharepoint group site using the `resourceBehaviorOptions` array when you create a group? add `appRoleForSite:{appId}:fullcontrol`
Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/...

#graph #microsoft
group resource type - Microsoft Graph v1.0
Represents a Microsoft Entra group, which can be a Microsoft 365 group, or a security group.
learn.microsoft.com
August 21, 2025 at 12:56 PM
Did you know #winget has almost 10.000 apps?
Details on which packages got updated, and when? github.com/svrooij/wing...
August 20, 2025 at 9:24 AM
Do not ask #github #copilot to do the migration, ask it to write a migration plan 🥇 svrooij.io/2025/08/19/v... #development #dotnet #devproxy
Vibe smarter not harder
Some tips for better vibe coding
svrooij.io
August 19, 2025 at 7:30 PM
Anybody seen "Pepsi Where's my jet?"

www.netflix.com/nl/title/814... Just watched episode 1 and what an adventure?
Pepsi, Where's My Jet? | Officiële Netflix-website
Als een 20-jarige een straaljager probeert te winnen in een Pepsi-kansspel, geeft hij de aanzet tot een David versus Goliath-rechtszaak die geschiedenis zal schrijven.
www.netflix.com
August 19, 2025 at 7:29 PM
Trying to see if I can use #github #copilot to migrate #devproxy to use the new version of Unobtanium.Web.Proxy
Ask it to do an inventory and migration instructions, before changing code. Good results so far!
"Response modifying plugins should be migrated first"
Living in the #future?
August 19, 2025 at 8:29 AM