Protected API integration testing & .NET Aspire
Tue 20 Jan 2026 Promexx, Best
Hack your protected API for integration testing - Stephan van Rooij
You built this API for your new product and it is protected with tokens from Entra ID (or any other IDP). To truly test your API, you don't want to disable the authentication part.
How do you actually run your (mandatory) integration tests without disabling authentication? Using a man-in-the-middle attack on your api, you can create tokens that, for the application, appear to be from Entra ID and actually get validated.
Do you want to run your integration tests on your api, without compromising the integrity of your API?
Want to test if the role-based-access-control is working as expected?
Broken access control and Identification and Authentication failures are both in the OWASP top 10, let's make sure you don't make these mistakes.
And while we are at it, I'll show you how you can protect your API against these forged tokens
Goodbye Docker Compose, Hello .NET! How Aspire Improves Your Local DevEx and DevOps Experiences - Thimo Koolen
.NET Aspire has been introduced to the world by surprise with the release of .NET 8 and has been GA for a while now. It's likely you heard a lot about Aspire yet, but what is it really? And what are some of the features beyond the "new Aspire app" solution template? Let's dive in!
Schedule
- 17:30 - 18:30 Walk-in & Dinner
- 18:30 - 19:15 Part I: Hack your protected API for integration testing
- 19:15 - 19:30 Break
- 19:30 - 20:15 Part II: Goodbye Docker Compose, Hello .NET! How Aspire Improves Your Local DevEx and DevOps Experiences
- 20:15 - 21:00 Drinks and socializing
Capacity
- Maximum:
- 50
Sign up
You can sign up or cancel for this free Event until Friday 16 Jan 2026 15:00.
Event Host
Event Host
Speakers
Stephan van Rooij
Smartersoft BV
A blogger, a speaker but mainly a software architect with a strong focus on security, identity and automation. My day job is all .NET core and single-sign-on. If I have some spare time, I'm mostly working on one off my home automation projects (with over half a million combined downloads)
I'm also an occasional contributor to @azure/msal, azure/microsoft docs and Azure pipeline tasks
Thimo Koolen
4Dotnet
Software Engineering Professional with a passion for .NET, the cloud and theme parks. Holding a BSc in Computer Science, I have been captivated by the world of software engineering since childhood. Today, I am thrilled to work full-time doing what I love, mainly within the .NET ecosystem, including .NET 9, Blazor, .NET Aspire, Microservices, Azure, and Azure DevOps.
Quality is my top priority. I work closely with stakeholders to refine and improve requirements, collaborating with the team to deliver the best possible product. Communication and teamwork are key to achieving this success. As a lifelong learner, I'm currently diving into .NET Aspire to further expand my knowledge.
I bring enthusiasm and a positive attitude to every project, always striving to keep team morale high. And outside of coding, you can often find me exploring theme parks!
Promexx, Best
de Maas 8
5684 PL Best
Building
Third Floor
Transport
Free parking is available around the building.
If you're traveling by public transport, bus lines 20 and 120 stop at "Best, Brem" in front of Makro Best.
From there, it's a 10-minute walk (approximately 750 meters) to Promexx.
