The JWT verification was consuming the request body before our handler could read it. Since this function is called from authenticated sessions, we verify differently. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>