Wrong generated token in production, impossible to fetch data by API?

That looks like an error thrown by the Azure WAF and not Strapi itself, it’s entirely unrelated to us.