Coding Stephan

Tilburg Tech Tuesday - Fake tokens for integration testing

Tuesday April 21st 2026 I had the pleasure to speak at Tilburg Tech Tuesday and event hosted by Freshheads. As being a developer enthusiastic about security, I off course, had to do a talk on something security.

I felt very proud to see a “sold-out” event with almost everybody showing up. No seats were left unused.

Check out the slides below 👇

Tilburg Tech Tuesday slides

Key take-a-ways

As developers we just have to do better! With all the vibe coding going on it is only going to get worse if we don’t pay attention.

  • Broken access control is the number 1 issue according to OWASP
  • Don’t trust user input
  • Validate success responses and be sure to also check failures
  • Invest a bit of time in (automated) testing
  • IdentityProxy can be used to fake tokens during testing

Slides

I promised to publish the slides, so here you go.

If you want me to give this talk for all your developers on-site, contact me on LinkedIn and we can work something out.

Voedselbank

On May 30th 2026 I’ll be joining Gymrace and I want to raise money for the Voedselbank. If you also think people should not live in poverty maybe you can contribute to my fundraiser.

Naar de haaien voor de voedselbank