Skip to content

Function: verifyBotToken()

verifyBotToken(authorization, options): Promise<VerifiedBotToken>

Verify the Authorization header on an inbound Bot Service request.

Rejects (by throwing) a missing / malformed header, a bad signature, an untrusted issuer, or an audience that is not this bot’s appId. The caller turns a throw into a 401 - never into a processed activity.

string | undefined

VerifyOptions

Promise<VerifiedBotToken>