diff --git a/pagure/api/__init__.py b/pagure/api/__init__.py
index 413b80c..e4013e3 100644
--- a/pagure/api/__init__.py
+++ b/pagure/api/__init__.py
@@ -46,7 +46,7 @@ def check_api_acls(acls):
     if 'Authorization' in flask.request.headers:
         authorization = flask.request.headers['Authorization']
         if 'token' in authorization:
-            token_str = authorization.split('token')[1].strip()
+            token_str = authorization.split('token', 1)[1].strip()
 
     token_auth = False
     if token_str: