Add cleanup, minor fixes

backend/internal/rest/handler_jitsi.go

@@ -6,6 +6,28 @@ import (
 	"time"
 )
 
+// sanitizeRoomName trims a room name and collapses any character that is not
+// allowed in a room name into a single dash, stripping leading/trailing dashes.
+// Case is preserved because Jitsi room names are case-sensitive.
+func sanitizeRoomName(value string) string {
+	var builder strings.Builder
+	builder.Grow(len(value))
+	previousDash := false
+	for _, r := range strings.TrimSpace(value) {
+		allowed := (r >= 'a' && r <= 'z') || (r >= 'A' && r <= 'Z') || (r >= '0' && r <= '9') || r == '-' || r == '_'
+		if allowed {
+			builder.WriteRune(r)
+			previousDash = false
+			continue
+		}
+		if !previousDash {
+			builder.WriteByte('-')
+			previousDash = true
+		}
+	}
+	return strings.Trim(builder.String(), "-")
+}
+
 type joinRoomRequest struct {
 	Room string `json:"room"`
 }
@@ -54,7 +76,7 @@ func (h *Handler) joinRoom(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	room := strings.TrimSpace(req.Room)
+	room := sanitizeRoomName(req.Room)
 	if room == "" {
 		writeError(w, http.StatusBadRequest, "room is required")
 		return
@@ -93,7 +115,7 @@ func (h *Handler) joinRoom(w http.ResponseWriter, r *http.Request) {
 func (h *Handler) deleteRecentRoom(w http.ResponseWriter, r *http.Request) {
 	u := userFromRequest(r)
 
-	room := strings.TrimSpace(r.PathValue("room"))
+	room := sanitizeRoomName(r.PathValue("room"))
 	if room == "" {
 		writeError(w, http.StatusBadRequest, "room is required")
 		return