diff --git a/changelog.d/+34ebe57e.bugfix.md b/changelog.d/+34ebe57e.bugfix.md
new file mode 100644
index 000000000..eb051e7a4
--- /dev/null
+++ b/changelog.d/+34ebe57e.bugfix.md
@@ -0,0 +1 @@
+Whitespace will now automatically be trimmed from the start and end of the `global.oauth.oidc.client_secret_file`.
diff --git a/src/service/oidc/mod.rs b/src/service/oidc/mod.rs
index 653b0b3c4..89769f552 100644
--- a/src/service/oidc/mod.rs
+++ b/src/service/oidc/mod.rs
@@ -151,6 +151,7 @@ impl crate::Service for Service {
                     config: config.clone(),
 					client_secret: if let Some(client_secret_file) = &config.client_secret_file {
 						std::fs::read_to_string(client_secret_file)
+							.map(|client_secret| client_secret.trim().to_owned())
 							.map(ClientSecret::new)
 							.map_err(|err| err!("Failed to read OIDC client secret file: {err}"))?
 					} else if let Some(client_secret) = &config.client_secret {