Problem
GC sits at 2025-05.140.0. Node 20.11.0 Express route catches the ai.bot.session.started webhook but the JWT payload keeps missing the conversationId field after the bot transfers to a human. It’s throwing a 401 Unauthorized. The EventBridge consumer drops the batch. Logs don’t show the full payload but the signature verifies fine. Doing jack all to fix it yet.
{ "error": "missing_claims", "code": "JWT_MALFORMED" }
Token structure probably changed with the latest bot framework release.