diff --git a/hscontrol/types/config.go b/hscontrol/types/config.go
index 8e619733..d9d58301 100644
--- a/hscontrol/types/config.go
+++ b/hscontrol/types/config.go
@@ -590,7 +590,7 @@ func GetHeadscaleConfig() (*Config, error) {
 		if err != nil {
 			return nil, err
 		}
-		oidcClientSecret = string(secretBytes)
+		oidcClientSecret = strings.TrimSpace(string(secretBytes))
 	}
 
 	return &Config{