diff --git a/backend/openapi/paths/internal/rooms.yaml b/backend/openapi/paths/internal/rooms.yaml
index 674965a..1c84062 100644
--- a/backend/openapi/paths/internal/rooms.yaml
+++ b/backend/openapi/paths/internal/rooms.yaml
@@ -40,6 +40,8 @@
                 $ref: '../../components/responses/internal/success-get-room-roles.yaml'
             '404':
                 $ref: '../../components/responses/error-room-not-found.yaml'
+            '422':
+                $ref: '../../components/responses/validation-error.yaml'
             '500':
                 $ref: '../../components/responses/internal-server-error.yaml'
 /rooms/{roomId}/roles/{secret}:
@@ -62,5 +64,7 @@
                 $ref: '../../components/responses/internal/error-invalid-room-secret.yaml'
             '404':
                 $ref: '../../components/responses/error-room-not-found.yaml'
+            '422':
+                $ref: '../../components/responses/validation-error.yaml'
             '500':
                 $ref: '../../components/responses/internal-server-error.yaml'
diff --git a/backend/openapi/paths/rooms.yaml b/backend/openapi/paths/rooms.yaml
index fd7cc1b..3484f0b 100644
--- a/backend/openapi/paths/rooms.yaml
+++ b/backend/openapi/paths/rooms.yaml
@@ -45,6 +45,8 @@
                 $ref: '../components/responses/unauthorized-error.yaml'
             '403':
                 $ref: '../components/responses/forbidden-error.yaml'
+            '422':
+                $ref: '../components/responses/validation-error.yaml'
             '500':
                 $ref: '../components/responses/internal-server-error.yaml'
 
@@ -114,6 +116,8 @@
                 $ref: '../components/responses/forbidden-error.yaml'
             '404':
                 $ref: '../components/responses/error-room-not-found.yaml'
+            '422':
+                $ref: '../components/responses/validation-error.yaml'
             '500':
                 $ref: '../components/responses/internal-server-error.yaml'
     delete:
@@ -148,5 +152,7 @@
                 $ref: '../components/responses/forbidden-error.yaml'
             '404':
                 $ref: '../components/responses/error-room-not-found.yaml'
+            '422':
+                $ref: '../components/responses/validation-error.yaml'
             '500':
                 $ref: '../components/responses/internal-server-error.yaml'
diff --git a/backend/src/routes/room.routes.ts b/backend/src/routes/room.routes.ts
index 8aa9f31..df7b2fe 100644
--- a/backend/src/routes/room.routes.ts
+++ b/backend/src/routes/room.routes.ts
@@ -68,10 +68,16 @@ internalRoomRouter.put(
 internalRoomRouter.post(
 	'/:roomId/recording-token',
 	configureRecordingTokenAuth,
+	withValidRoomId,
 	withValidRoomSecret,
 	roomCtrl.generateRecordingToken
 );
 
 // Roles and permissions
-internalRoomRouter.get('/:roomId/roles', roomCtrl.getRoomRolesAndPermissions);
-internalRoomRouter.get('/:roomId/roles/:secret', roomCtrl.getRoomRoleAndPermissions);
+internalRoomRouter.get('/:roomId/roles', withValidRoomId, roomCtrl.getRoomRolesAndPermissions);
+internalRoomRouter.get(
+	'/:roomId/roles/:secret',
+	withValidRoomId,
+	withValidRoomSecret,
+	roomCtrl.getRoomRoleAndPermissions
+);