Check that symbols such as "+" in the token are properly percent-encoded in the URL.
Link to this page:
https://wiki.pastlives.space/MediaWiki:Apiwarn-checktoken-percentencoding