diff --git a/openresty/nginx.conf b/openresty/nginx.conf
index 54e1d78..e9e6268 100644
--- a/openresty/nginx.conf
+++ b/openresty/nginx.conf
@@ -996,7 +996,11 @@ http {
                 local redis_helper = require "redis_helper"
 
                 -- Get viewer token from query parameter or cookie
+                -- Note: ngx.var.arg_token returns URL-encoded value, must decode it
                 local token = ngx.var.arg_token
+                if token then
+                    token = ngx.unescape_uri(token)
+                end
 
                 -- If not in query parameter, try cookie
                 if not token then