diff --git a/v2/src/impersonation/index.js b/v2/src/impersonation/index.js
index e29fb8a..31851bf 100644
--- a/v2/src/impersonation/index.js
+++ b/v2/src/impersonation/index.js
@@ -16,7 +16,7 @@
 
 const ALLOWED_USERS = new Set(
   (process.env.IMP_ALLOWED || '')
-    .split(',').map(s => s.trim()).filter(Boolean)
+    .split(/[\s,]+/).map(s => s.trim()).filter(Boolean)
 );
 
 function enhanceImpersonation(req, res, next) {