Sign in

Stephan van Rooij

@svrooij.io
1.1K followers 565 following 450 posts

I'll talk about APIs, Security and building applications in #dotnet svrooij.io | Microsoft MVP Security & Graph | wintuner.app | mvp.microsoft.com/en-US/mvp/profile…

PostsRepliesMedia
Stephan van Rooij @svrooij.io · 10/09/2026
Last session at #cybersec Netherlands the "inactive" privacy officer Pieter is explaining about the DigiD debacle.
000
Stephan van Rooij @svrooij.io · 28/08/2026
I just programmed my Kincony KC868-M16-V2. A 16-port CT clamp measuring device. I'm hoping this will allow me to measure current on 16 individual devices. #geek #nerd
010
Stephan van Rooij @svrooij.io · 24/08/2026
I'll be installing this Kincony M16 v2 board to measure realtime power usage of 16 different devices/rooms. And then get rid of all those power measurement devices around the house.
000
Stephan van Rooij @svrooij.io · 14/08/2026
Smartify your not so smart doorbell with this €25 euro device and 15 minutes of your time. svrooij.io/2026/08/14/s... @home-assistant.io @zuidwijk.com Super easy to do and brings a lot of joy (for me at least) #homeautomation
svrooij.io
Smartify your doorbell
Convert your ding-dong into a smart doorbell with ESPHome and Home Assistant, offering notifications, virtual ringing, chime control, and easy retrofit.
010
Stephan van Rooij @svrooij.io · 12/08/2026
Want to create your own custom integration for @home-assistant.io ? Check out my setup for easy debugging with breakpoint support svrooij.io/2026/08/11/e... #development
svrooij.io
Extending Home Assistant: Custom Integration
I recently built a custom integration Microsoft Calendar for Home Assistant. Which does just that, connect your Microsoft 365 calendar to Home Assistant. Allowing you to react to events from your cale...
000
Stephan van Rooij @svrooij.io · 12/08/2026
Over a year ago I added PKCE support in @home-assistant.io why I wanted this? Check out svrooij.io/2026/08/11/h... #security
svrooij.io
Home Assistant: Adding PKCE support
Home Assistant is an open source, local focussed home automation platform, why would it need PKCE support? Not all devices have a local api, and for those products and services that only have a cloud ...
010
Stephan van Rooij @svrooij.io · 17/07/2026
Renewed as #Microsoft MVP ✅ svrooij.io/2026/07/16/v...
svrooij.io
Most Valuable Professional 2026
Wednesday July 15th 2026 I got an email from Microsoft, “You’ve been accepted to the Microsoft MVP Program!”. The Microsoft Most Valuable Professional award is given to people like me who contribute a...
160
Stephan van Rooij @svrooij.io · 07/07/2026
What did you get this time? Well I'm giving a talk on home automation with #dotnet, and I want to show how you can use a cheap wifi chip to mod a dump light to be wifi controllable. #esphome
010
Stephan van Rooij @svrooij.io · 15/06/2026
What do you think is in this small box (screwdriver for reference), it is worth around €600 😯 and has to do with #security
100
Stephan van Rooij @svrooij.io · 15/04/2026
I'm stoked to tell all off you that I joined the organizing team for @dotnetzuid.nl #community meetup #dotnet www.dotnetzuid.nl
000
Reposted by Stephan van Rooij
Joe Finney @thejoefin.com · 24/03/2026
@svrooij.io check this out github.com/TheJoeFin/tr...
github.com
GitHub - TheJoeFin/trowser: Trowser is a WinUI 3 Windows desktop application that lets you pin browser shortcuts as tray icons. Click a tray icon to open a flyout WebView2 panel right from the taskbar...
Trowser is a WinUI 3 Windows desktop application that lets you pin browser shortcuts as tray icons. Click a tray icon to open a flyout WebView2 panel right from the taskbar, or pop it out into a st...
021
Stephan van Rooij @svrooij.io · 23/01/2026
I had the pleasure to speak a @dotnetzuid.nl and share my latest #security project. An introduction to IdentityProxy. Check out my key take aways svrooij.io/2026/01/23/i...
010
Reposted by Stephan van Rooij
.NET Zuid user group @dotnetzuid.nl · 20/01/2026
And we're off...! We're starting the evening with @svrooij.io explaining how to "Hack your protected API for integration testing". Thanks to #Promexx for hosting us.
A picture of a .NET Zuid event at Promexx, with Stephan van Rooij talking about API security.
231
Stephan van Rooij @svrooij.io · 04/01/2026
I've been building apps and libraries to control Sonos speakers for a very long time. Sonos2mqtt has over 500.000 docker pulls. Now today I got a hold of information on how the details for third party media servers are stored. Have to get this into those libraries. More soon, please follow ☝️✅
020
Stephan van Rooij @svrooij.io · 12/12/2025
Any Bacardi fans here? Selling my Bacardi bomber jacket, any profits go to a good cause link.marktplaats.nl/m2344271314?...
link.marktplaats.nl
≥ Bacardi bomberjack XL Cuba Libre (goede doel) — Jassen | Winter — Marktplaats
Koop nu deze one of a kind Bacardi bomberjack (maat XL) en krijg er er een lege 3L Bacardi fles bij.Dit zijn echt collectors items. Van deze jas zit in
000
Stephan van Rooij @svrooij.io · 12/12/2025
Tell me how old you are, without telling me your age? Let me start. I have this box in the attic with these things in it. (Which I bring to the @homecomputermuseum.computermuseum.social.ap.brid.gy next week)
110
Reposted by Stephan van Rooij
Elio Struyf @eliostruyf.com · 19/11/2025
A new way to grow as a speaker. EngageTime will soon give you clear analytics across all your sessions. See your impact, your ratings, your reactions. Understand what resonates so you can step on stage with even more confidence. engagetime.live
001
Stephan van Rooij @svrooij.io · 19/11/2025
Want to test your api without disabling authentication? Check out Identity Proxy, which allows you to hack your api for integration testing! svrooij.io/2025/11/19/i... #security #dotnet #development
svrooij.io
Introducing Identity Proxy
Discover Identity Proxy: a tool for testing APIs with JWT authentication without disabling security. Simplify your API testing process today!
021
Stephan van Rooij @svrooij.io · 27/10/2025
Did we need another nugget package? I sure think so! Check out this source generator that will help you automatically register your minimal endpoints. github.com/svrooij/dotn... Inspired by a YouTube video from @milanjovanovic.bsky.social some time ago. #dotnet #webapi
github.com
GitHub - svrooij/dotnet-endpoint-mapper: Dotnet source generator to automatically discover all endpoints in your project.
Dotnet source generator to automatically discover all endpoints in your project. - svrooij/dotnet-endpoint-mapper
011
Reposted by Stephan van Rooij
Devfender @devfender.bsky.social · 25/10/2025
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory. This is a cloud only Tenant!
011
Reposted by Stephan van Rooij
Daniel Hutmacher @dhma.ch · 20/10/2025
Want to present at our new Stockholm SQL usergroup? We're doing in-person sessions about once per month. If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!
497
Stephan van Rooij @svrooij.io · 11/10/2025
Are you still using the WithSecret or WithCertificate methods on the #microsoft identity client? Check out this post to see how that can be replaced with a managed identity. svrooij.io/2025/10/10/s... #security #development
svrooij.io
Secretless confidential applications
The Microsoft Authentication Library (MSAL) is one of my favorite libraries. It eases the process of getting tokens for Entra ID protected resources, and since most developers seem to struggle with ge...
010
Stephan van Rooij @svrooij.io · 02/10/2025
@vandervalk.pro Is all ready for the last talk of the day at #netassemble "Dont let your access tokens be stolen" #security
010
Stephan van Rooij @svrooij.io · 02/10/2025
#netassemble first session by @wildermuth.com at #mstack "you can be bad everywhere" is the best quote from this talk so far. #community #dotnet
011
Stephan van Rooij @svrooij.io · 02/10/2025
Fourth edition of #netassemble by #MStack
010
Stephan van Rooij @svrooij.io · 23/09/2025
Maarten staat klaar voor zijn sessie op deze eerste #diwug na de vakantie #community Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net
041
Reposted by Stephan van Rooij
.NET Zuid user group @dotnetzuid.nl · 22/09/2025
Thank you #Keeyns for hosting us tonight! We have a full house, listening to Thomas Huijer's talk "Exploring C# Source Generators". #dotnetzuid
034
Stephan van Rooij @svrooij.io · 17/09/2025
From VM to Markdown, ditching #wordpress by @energy164.online at #azurefest
040
Stephan van Rooij @svrooij.io · 17/09/2025
#azurefest 2025 let's go
000
Reposted by Stephan van Rooij
Michel Mendes @michelcarlo.bsky.social · 13/09/2025
Did you know you can leverage the Azure DevOps Rest API in Power Automate to run actions that are not available in Power Automate?🚀 In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇
131
Reposted by Stephan van Rooij
Mark Jack @markjackmilian.bsky.social · 08/09/2025
Unlock the power of raw Kestrel! Learn when to skip WebApplicationBuilder and directly leverage Kestrel for optimized .NET apps. Ideal for low-level control and performance tuning. #DotNet #Kestrel
medium.com
When You Don’t Need WebApplicationBuilder: Raw Kestrel in Action
You’ll rarely wake up thinking, “Today I’m building a .NET web app without WebApplicationBuilder” — but there’s no harm in experimenting…
011
Stephan van Rooij @svrooij.io · 30/08/2025
Anyone ever used RapiDoc? rapidocweb.com to provide developer docs about your api? Alternative to Swagger and Scalar. How not decided which one is the best. #openapi #developer
rapidocweb.com
RapiDoc - Web Component based Swagger & OpenAPI Spec Viewer
RapiDoc is Web Component for viewing Swagger & OpenAPI Spec. Supports themes, styling and various rendering styles
000
Stephan van Rooij @svrooij.io · 28/08/2025
I just used the "Start from backup" flow to migrate @home-assistant.io from one machine to the next. And WOW, I never had such a smooth migration. 🥇 Other companies can learn something from this!! www.home-assistant.io/common-tasks... Migrated home assistant from arm64 to amd64 with zero issues
home-assistant.io
Common tasks - installation independent
Common tasks
030
Stephan van Rooij @svrooij.io · 28/08/2025
Building an application that used role based access control? Here is a nice trick to not have to built any user and or role management things in your app. Just off-load this to the remote security team using Microsoft Entra. svrooij.io/2025/08/27/e...
svrooij.io
Let's talk App Roles
App Roles in Microsoft Entra are under utilized and deserve more attention, this guide will help you get started
012
Reposted by Stephan van Rooij
Follow the Money @ftm.nl · 24/08/2025
Zelf een video maken om je eigen straatje schoon te vegen in plaats van vragen van journalisten te beantwoorden: bij Follow the Money kennen we dit trucje maar al te goed. Mensen onder vuur verspreiden zo hún versie van de feiten om kritiek te ontwijken. Hoe gaat FTM hiermee om?
ftm.nl
Wantrouw mensen onder vuur die zelf ‘het ware verhaal’ vertellen
Follow the Money - Platform voor onderzoeksjournalistiek
510830
Reposted by Stephan van Rooij
Fabian Bader @fabian.bader.cloud · 24/07/2025
A rare, but highly welcome change. Microsoft changed the license requirement for Token protection from Entra ID P2 to P1. This will protect more customers in the long run and lead to a more secure ecosystem. learn.microsoft.com/en-us/entra/...
learn.microsoft.com
Microsoft Entra Conditional Access token protection explained - Microsoft Entra ID
Learn how to secure your environment with token protection in Microsoft Entra Conditional Access policies.
0104
Reposted by Stephan van Rooij
Mobile Jon | Intune, W365, Entra, Security MVP @mobilejon.bsky.social · 11/08/2025
Recently, we announced the finalists for the most special of the #GoldenClippyAwards The #ChuckNorris award is for heroes in multiple areas: @nathanmcnulty.com @fabian.bader.cloud @bindertech.se @knudsenm.bsky.social@mortenknudsen.net Congratulate them/reshare for these rockstars! #MVPBuzz #WPNinjas
032
Stephan van Rooij @svrooij.io · 22/08/2025
Have a Volvo and using @home-assistant.io ? The Volvo On Call integration is broken. It has been replaced by a new integration that connects to the new api. I'm now creating the depreciation message.
110
Stephan van Rooij @svrooij.io · 21/08/2025
Did you know you can "pre-provision" application access to your sharepoint group site using the `resourceBehaviorOptions` array when you create a group? add `appRoleForSite:{appId}:fullcontrol` Ow, wait this is NOT documented 😂 learn.microsoft.com/en-us/graph/... #graph #microsoft
learn.microsoft.com
group resource type - Microsoft Graph v1.0
Represents a Microsoft Entra group, which can be a Microsoft 365 group, or a security group.
000
Stephan van Rooij @svrooij.io · 20/08/2025
Did you know #winget has almost 10.000 apps? Details on which packages got updated, and when? github.com/svrooij/wing...
010
Stephan van Rooij @svrooij.io · 19/08/2025
Do not ask #github #copilot to do the migration, ask it to write a migration plan 🥇 svrooij.io/2025/08/19/v... #development #dotnet #devproxy
svrooij.io
Vibe smarter not harder
Some tips for better vibe coding
031
Stephan van Rooij @svrooij.io · 19/08/2025
Anybody seen "Pepsi Where's my jet?" www.netflix.com/nl/title/814... Just watched episode 1 and what an adventure?
netflix.com
Pepsi, Where's My Jet? | Officiële Netflix-website
Als een 20-jarige een straaljager probeert te winnen in een Pepsi-kansspel, geeft hij de aanzet tot een David versus Goliath-rechtszaak die geschiedenis zal schrijven.
120
Stephan van Rooij @svrooij.io · 19/08/2025
Trying to see if I can use #github #copilot to migrate #devproxy to use the new version of Unobtanium.Web.Proxy Ask it to do an inventory and migration instructions, before changing code. Good results so far! "Response modifying plugins should be migrated first" Living in the #future?
110
Reposted by Stephan van Rooij
Nathan McNulty @nathanmcnulty.com · 19/08/2025
Phew, all renewed for another year :p If anyone is going for any of the Microsoft Security or Endpoint management certs, always feel free to ping me with questions ;)
0111
Stephan van Rooij @svrooij.io · 18/08/2025
Second beta of Unobtanium.Web.Proxy just got released!! github.com/svrooij/unob... Focus here was better traceability of proxies requests. Keeping track of source details, Aspire visibility, stable request Id and better testing
github.com
Release v0.9.1-beta.2 · svrooij/unobtanium-web-proxy
Unobtanium.Web.Proxy is not written in modern C#, using Kestrel (you know the low-level http(s) server after dotnet). With some proxy specifications at hand, I managed to built a WAY less complex h...
111
Reposted by Stephan van Rooij
Guy Sie @guysie.nl · 17/08/2025
Nocturne 3 is out, and it revives your Spotify Car Thing (which Spotify turned into ewaste last year)! Installed it this afternoon and I’m really impressed. I have Carplay now so don’t need Car Thing, but it’ll make a nice desk Spotify controller. usenocturne.com
usenocturne.com
Nocturne - Your Car Thing's Second Chapter
When Spotify ended support, we created a new beginning. Join our growing community of users giving their Car Thing a second life with Nocturne.
141
Stephan van Rooij @svrooij.io · 17/08/2025
Can someone explain the difference between running tests in Visual Studio and through #dotnet test? The latter is failing while they run as expected in VS? Very frustrating #development
100
Stephan van Rooij @svrooij.io · 15/08/2025
As if #kestrel is built for #httpsInspection!! Look at this beautiful asynchronous callback that allows you to pick the certificate based on information from ClientHello #dotnet #microsoft Unobtanium.Web.Proxy learn.microsoft.com/en-us/aspnet...
learn.microsoft.com
Configure endpoints for the ASP.NET Core Kestrel web server
Learn about configuring endpoints with Kestrel, the cross-platform web server for ASP.NET Core.
010
Stephan van Rooij @svrooij.io · 14/08/2025
I might have found a new use for #kestrel, you can use it as a base for a https inspection proxy. And the first release is blazingly fast!! 🏎️ What would you build with https interception capabilities? github.com/svrooij/unob... #dotnet @davidfowl.com any cool ideas? Aspire integration?
github.com
Release v0.9.1-beta.1 Full rewrite to kestrel · svrooij/unobtanium-web-proxy
This release is the very first release of the completely rewritten web proxy. After having issue after issue for days. Solved one, two new issues appeared. I was stuck on a road to nowhere. I then ...
110
Stephan van Rooij @svrooij.io · 04/08/2025
Road down memory lane, after 10 years I charged my #pebble Steel smartwatch again, and it still works! Getting the notifications from my phone! This is definitely one of the best smartwatches EVER 🤩✅⌚
Pebble steel smartwatch
120