Quoted / characters in the TOKEN part of URLs of the form https://domain_name.org/TOKEN/package_name/package-version.tar.gz become unquoted. This is incorrect as the unquoted / is interpreted as a path separator.

This issue came out of the discussion on issue #6437 , in particular from this comment. @cwharland , please feel free to add more details in case I have missed something.