Token name with colon is accepted but doesn't work on usage

[Playacem]

What happened?

As reported on discord:

Reposilite does not verify that the token name does not contain any colons. As the provided values are used with HTTP Basic auth the provided values do not match with what the server has on file. The part after the username colon gets interpreted as part of the password. See also https://datatracker.ietf.org/doc/html/rfc7617#section-2

Furthermore, a user-id containing a colon character is invalid, as
the first colon in a user-pass string separates user-id and password
from one another; text after the first colon is part of the password.
User-ids containing colons cannot be encoded in user-pass strings.

Reposilite version

3.x

Relevant log output

No response