diff --git a/oauth_dropins/bluesky.py b/oauth_dropins/bluesky.py
index 0c2e4ccc..6d59fac1 100644
--- a/oauth_dropins/bluesky.py
+++ b/oauth_dropins/bluesky.py
@@ -86,8 +86,8 @@ class Callback(views.Callback):
   OAuth callback stub.
   """
   def dispatch_request(self):
-    handle = request.values['username']
-    password = request.values['password']
+    handle = request.values['username'].strip()
+    password = request.values['password'].strip()
     state = request.values.get('state')
 
     # get the DID (portable user ID)
diff --git a/oauth_dropins/indieauth.py b/oauth_dropins/indieauth.py
index 13d3d502..f1331548 100644
--- a/oauth_dropins/indieauth.py
+++ b/oauth_dropins/indieauth.py
@@ -107,7 +107,7 @@ def redirect_url(self, state=None, me=None):
 
     # TODO: unify with mastodon?
     if not me:
-      me = request.values['me']
+      me = request.values['me'].strip()
     parsed = urllib.parse.urlparse(me)
     if not parsed.scheme:
       me = 'http://' + me