From 874794c996e5feaaa5cc3ff30352742e6404858a Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Wed, 18 Feb 2026 14:07:50 -0800
Subject: [PATCH] Clean email

---
 server/private/routers/ssh/signSshKey.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/private/routers/ssh/signSshKey.ts b/server/private/routers/ssh/signSshKey.ts
index 9ffce8c1..4967b600 100644
--- a/server/private/routers/ssh/signSshKey.ts
+++ b/server/private/routers/ssh/signSshKey.ts
@@ -139,7 +139,7 @@ export async function signSshKey(
         if (!userOrg.pamUsername) {
             if (req.user?.email) {
                 // Extract username from email (first part before @)
-                usernameToUse = req.user?.email.split("@")[0];
+                usernameToUse = req.user?.email.split("@")[0].replace(/[^a-zA-Z0-9_-]/g, "");
                 if (!usernameToUse) {
                     return next(
                         createHttpError(