Publishing API returns 401 'Authentication Failed' with valid user token

Set.constructor`alert\x28document.domain\x29