From Dev.to
The URL Was Double-Encoded: Debugging a 400 from %2520
Quick answer: A 400 that only appears when a query value contains a space or a special character is usually double percent-encoding. The client encodes once, then a helper or proxy encodes the already...