Lightnews — Scholar-powered news

Stephan van Rooij

@svrooij.io

1.1K followers 550 following 420 posts

I'll talk about APIs, Security and building applications in #dotnet https://svrooij.io | Microsoft MVP Security & Graph | wintuner.app | https://mvp.microsoft.com/en-US/mvp/profile/cc128f12-003f-ed11-bba3-000d3a197333

svrooij.io

Posts Media Videos Starter Packs

Pinned

Stephan van Rooij @svrooij.io · Dec 4

I've built several open source packages, some touching almost 500.000 downloads. But I feel that not everybody understands #OSS (open source software). We need your help in making the community better. svrooij.io/2024/09/18/o... #community

Open-source explained for none developers

I recently saw a tweet from a well respected open-source developer, that someone was trying to use him as a free helpdesk. This is a common problem in the open-source community, and it’s a problem tha...

svrooij.io

3 7

Reposted by Stephan van Rooij

Daniel Hutmacher @dhma.ch · 1d

Want to present at our new Stockholm SQL usergroup? We're doing in-person sessions about once per month.

If you can't make any of those specific dates, reach out to @transmokopter.bsky.social or me, and we'll work something out for you!

Call for Data Speakers @callfordataspeakers.com · 1d

Call for speakers: Stockholm SQL 2025-2026 - https://us7.campaign-archive.com/?u=b8db1e2ab2a0ee1aa69c8bb27&id=12aea8068e

4 5 8

Stephan van Rooij @svrooij.io · 5d

Just found this thing. I guess this is going to be my solution to provide internet and power to my wall mounted tablet. Curious if that works eu.store.ui.com/eu/en/catego...

PoE to USB-C Adapter - Ubiquiti Store

Versatile adapter that provides power and connectivity to USB-C devices, including compatible Protect WiFi cameras.

eu.store.ui.com

Stephan van Rooij @svrooij.io · 6d

I guess you need some everything presence sensors. They will also detect you when you're sitting still. @lewisbarclay.bsky.social can you help this guy out?

1 1

Stephan van Rooij @svrooij.io · 10d

Are you still using the WithSecret or WithCertificate methods on the #microsoft identity client? Check out this post to see how that can be replaced with a managed identity. svrooij.io/2025/10/10/s...
#security #development

Secretless confidential applications

The Microsoft Authentication Library (MSAL) is one of my favorite libraries. It eases the process of getting tokens for Entra ID protected resources, and since most developers seem to struggle with ge...

svrooij.io

Stephan van Rooij @svrooij.io · 19d

@vandervalk.pro Is all ready for the last talk of the day at #netassemble
"Dont let your access tokens be stolen" #security

Stephan van Rooij @svrooij.io · 19d

#netassemble first session by @wildermuth.com at #mstack "you can be bad everywhere" is the best quote from this talk so far. #community #dotnet

1 1

Stephan van Rooij @svrooij.io · 19d

Fourth edition of #netassemble by #MStack

Stephan van Rooij @svrooij.io · 25d

Left

2 1

Stephan van Rooij @svrooij.io · 28d

Maarten staat klaar voor zijn sessie op deze eerste #diwug na de vakantie
#community
Microsoft 365 copilot and the content "discoverability" challenge. @maarten.eekels.net

1 4

Reposted by Stephan van Rooij

.NET Zuid user group @dotnetzuid.nl · 29d

Thank you #Keeyns for hosting us tonight! We have a full house, listening to Thomas Huijer's talk "Exploring C# Source Generators".
#dotnetzuid

4 3

Stephan van Rooij @svrooij.io · Sep 17

From VM to Markdown, ditching #wordpress by @energy164.online at #azurefest

Stephan van Rooij @svrooij.io · Sep 17

#azurefest 2025 let's go

Reposted by Stephan van Rooij

Michel Mendes @michelcarlo.bsky.social · Sep 13

Did you know you can leverage the Azure DevOps Rest API in Power Automate to run actions that are not available in Power Automate?🚀

In the example below, I wanted to detect what is the current iteration for a project and obtain its data to send in some automated messages👇

1 1 3

Reposted by Stephan van Rooij

Mark Jack @markjackmilian.bsky.social · Sep 8

Unlock the power of raw Kestrel! Learn when to skip WebApplicationBuilder and directly leverage Kestrel for optimized .NET apps. Ideal for low-level control and performance tuning. #DotNet #Kestrel

When You Don’t Need WebApplicationBuilder: Raw Kestrel in Action

You’ll rarely wake up thinking, “Today I’m building a .NET web app without WebApplicationBuilder” — but there’s no harm in experimenting…

medium.com

1 1

Stephan van Rooij @svrooij.io · Aug 31

Please explain?
Device does no longer work? They removed the local api?

Stephan van Rooij @svrooij.io · Aug 30

Anyone ever used RapiDoc? rapidocweb.com to provide developer docs about your api? Alternative to Swagger and Scalar. How not decided which one is the best. #openapi #developer

RapiDoc - Web Component based Swagger & OpenAPI Spec Viewer

RapiDoc is Web Component for viewing Swagger & OpenAPI Spec. Supports themes, styling and various rendering styles

rapidocweb.com

Stephan van Rooij @svrooij.io · Aug 29

Netherlands ✅

Stephan van Rooij @svrooij.io · Aug 28

I just used the "Start from backup" flow to migrate @home-assistant.io from one machine to the next. And WOW, I never had such a smooth migration. 🥇 Other companies can learn something from this!!
www.home-assistant.io/common-tasks...
Migrated home assistant from arm64 to amd64 with zero issues

Common tasks - installation independent

Common tasks

www.home-assistant.io

Stephan van Rooij @svrooij.io · Aug 28

Building an application that used role based access control? Here is a nice trick to not have to built any user and or role management things in your app. Just off-load this to the remote security team using Microsoft Entra. svrooij.io/2025/08/27/e...

Let's talk App Roles

App Roles in Microsoft Entra are under utilized and deserve more attention, this guide will help you get started

svrooij.io

2 1

Reposted by Stephan van Rooij

Follow the Money @ftm.nl · Aug 24

Zelf een video maken om je eigen straatje schoon te vegen in plaats van vragen van journalisten te beantwoorden: bij Follow the Money kennen we dit trucje maar al te goed. Mensen onder vuur verspreiden zo hún versie van de feiten om kritiek te ontwijken. Hoe gaat FTM hiermee om?

Wantrouw mensen onder vuur die zelf ‘het ware verhaal’ vertellen

Follow the Money - Platform voor onderzoeksjournalistiek

www.ftm.nl

5 31 110

Stephan van Rooij @svrooij.io · Aug 24

Could not figure out how to do that dynamically. As in accept every hostname, generate certificate on the fly.
And yarp is a reverse proxy not a forwarding proxy that accepts the CONNECT method you can use when you set this server as a web proxy in various operating systems

Stephan van Rooij @svrooij.io · Aug 23

Are you then one to ask if I have questions about strange usages of kestrel? I'm building a https inspection proxy with it (for testing of course), and after the initial Connect http message I want to "forward" to the same server but now on https port. Currently just opening new TCP tunnel.

Stephan van Rooij @svrooij.io · Aug 23

Still sounds interesting!

Stephan van Rooij @svrooij.io · Aug 23

Tell me more about this project!! Sounds super interesting (and sounds like you have the same issues that I'm having with my intercepting web proxy).
github.com/svrooij/unob...

v0.9.1-beta.2 · svrooij unobtanium-web-proxy · Discussion #52

Unobtanium.Web.Proxy is not written in modern C#, using Kestrel (you know the low-level http(s) server after dotnet). With some proxy specifications at hand, I managed to built a WAY less complex h...

github.com

Reposted by Stephan van Rooij

Fabian Bader @fabian.bader.cloud · Jul 24

A rare, but highly welcome change. Microsoft changed the license requirement for Token protection from Entra ID P2 to P1.

This will protect more customers in the long run and lead to a more secure ecosystem.

learn.microsoft.com/en-us/entra/...

Microsoft Entra Conditional Access token protection explained - Microsoft Entra ID

Learn how to secure your environment with token protection in Microsoft Entra Conditional Access policies.

learn.microsoft.com

4 10