From bbc8627867f5234a50f5fd9df9068937b4f786f3 Mon Sep 17 00:00:00 2001
From: ben <ben@de-roo.org>
Date: Mon, 17 Aug 2026 15:34:51 +0200
Subject: [PATCH] update endopoints

---
 backend/main.py  |  9 +--------
 backend/rooms.py | 15 ++++++++++-----
 2 files changed, 11 insertions(+), 13 deletions(-)

diff --git a/backend/main.py b/backend/main.py
index e358ea7..83cbc49 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -18,9 +18,6 @@ from fastapi.middleware.cors import CORSMiddleware
 from events import delete_event, get_room_events
 from rooms import regenerate_invite_code
 
-class InviteCodeUpdate(BaseModel):
-    invite_code: str
-
 class Login(BaseModel):
     username: str
     password: str
@@ -269,7 +266,6 @@ def api_join_room(
 @app.post("/rooms/{room_id}/invite-code")
 def update_invite_code(
     room_id: int,
-    data: InviteCodeUpdate,
     user_id: int = Depends(get_current_user)
 ):
     if not has_role(room_id, user_id, ["owner", "admin"]):
@@ -278,10 +274,7 @@ def update_invite_code(
             "reason": "no_permission"
         }
 
-    return regenerate_invite_code(
-        room_id,
-        data.invite_code
-    )
+    return regenerate_invite_code(room_id)
 
 # events
 
diff --git a/backend/rooms.py b/backend/rooms.py
index 8dc00e4..db128ff 100644
--- a/backend/rooms.py
+++ b/backend/rooms.py
@@ -280,17 +280,22 @@ def change_room_name(room_id, new_name, user_id):
         "updated_by": user_id
     }
 
-def regenerate_invite_code(room_id, new_code):
+import secrets
+import string
+
+def regenerate_invite_code(room_id):
+    new_code = ''.join(
+        secrets.choice(string.ascii_uppercase + string.digits)
+        for _ in range(8)
+    )
+
     execute(
         """
         UPDATE rooms
         SET invite_code = ?
         WHERE id = ?
         """,
-        (
-            new_code,
-            room_id
-        )
+        (new_code, room_id)
     )
 
     return {