Webrtc softphone token refresh failing with 401

Configuration is broken for some reason… the webrtc softphone integration keeps dropping after token expiry. using architect to fetch jwt via data action, then passing to the softphone sdk. when the token expires, the sdk throws a 401 unauthorized instead of triggering the refresh callback. checked the service account permissions and they look fine. anyone else see this behavior with the latest sdk version? is there a specific header missing in the initial auth request?