Conduit token invalid - any idea why?

I call my conduit API as follows: https://xyz/api/phame.post.search?api.token=api-foobar

Unfortunately I get always an invalid token response

  • created a bot user, this user has the token
  • created and re-created (as test) API token for bot user, but token never works
  • testing from Conduit API console works

Any idea what I am doing wrong?

{"result":null,"error_code":"ERR-CONDUIT-CORE","error_info":"You are trying to save some data to Phabricator, but the request your browser made included an incorrect token. Reload the page and try again. You may need to clear your cookies.\nThis was a Web request.\nThis request had no CSRF token."}

You should be making a POST call, not GET call.
api.token and other params are form fields, not query parameters.

Good point, did NOT cross my mind it is NOT working with QUERY parameters. I am almost sure it did work as query a while back, however GOOD POINT. Thanks!

I can use query parameters like above, but I have to post the request, at least according to my test.