diff --git a/server/auth.js b/server/auth.js
index a4aed50b8..f98d4c8b3 100644
--- a/server/auth.js
+++ b/server/auth.js
@@ -18,8 +18,8 @@ exports.login = async function (username, password) {
         return null;
     }
 
-    let user = await R.findOne("user", " username = ? AND active = 1 ", [
-        username,
+    let user = await R.findOne("user", "TRIM(username) = ? AND active = 1 ", [
+        username.trim(),
     ]);
 
     if (user && passwordHash.verify(password, user.password)) {