From 556141b404ad3f0f0a2cb98ee783b1c15d781745 Mon Sep 17 00:00:00 2001
From: Ginger <ginger@gingershaped.computer>
Date: Sat, 11 Jul 2026 15:45:01 -0400
Subject: [PATCH] fix: Trim whitespace from OIDC client secret file

---
 changelog.d/+34ebe57e.bugfix.md | 1 +
 src/service/oidc/mod.rs         | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 changelog.d/+34ebe57e.bugfix.md

diff --git a/changelog.d/+34ebe57e.bugfix.md b/changelog.d/+34ebe57e.bugfix.md
new file mode 100644
index 000000000..eb051e7a4
--- /dev/null
+++ b/changelog.d/+34ebe57e.bugfix.md
@@ -0,0 +1 @@
+Whitespace will now automatically be trimmed from the start and end of the `global.oauth.oidc.client_secret_file`.
diff --git a/src/service/oidc/mod.rs b/src/service/oidc/mod.rs
index 653b0b3c4..89769f552 100644
--- a/src/service/oidc/mod.rs
+++ b/src/service/oidc/mod.rs
@@ -151,6 +151,7 @@ impl crate::Service for Service {
                     config: config.clone(),
 					client_secret: if let Some(client_secret_file) = &config.client_secret_file {
 						std::fs::read_to_string(client_secret_file)
+							.map(|client_secret| client_secret.trim().to_owned())
 							.map(ClientSecret::new)
 							.map_err(|err| err!("Failed to read OIDC client secret file: {err}"))?
 					} else if let Some(client_secret) = &config.client_secret {