Since tokens are session specific rather than page specific, it doesn't make sense that you have to tie your request for a token to a specific page. Most APIs that I've used with other web applications have an API command that just returns an editing token by itself. The current method is especially problematic when trying to get a token via JSON since you have to know the page ID beforehand: http://pastie.org/1611746 (although this could be fixed separately)
It would be nice to be able to make a request like:
http://en.wikipedia.org/w/api.php?action=query&prop=token&format=json
and get a response like:
{"query":{"token":"0ee46bb725c621d23f55c16d0b7b3d6e+\\"}}
(The URL and response above don't distinguish token type since they are actually all the same token.)
Version: unspecified
Severity: enhancement
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=56204