Valid Characters in User-Name & Password

Hi, Sorry if this is a dumb question but I couldn't find anything on google. Is there a list of valid characters that can be in the username & password feild of the access-request and account-start packets? for example, is a space (" ") valid in the username, #,&,^,etc. Where can I find this kind of info? Thanks!