Authorize an outbound INVITE from a registered endpoint
Internal jambonz auth-hook fired before an outbound INVITE from a registered softphone leaves the edge. It validates that the credential’s organization has outbound calling enabled, that the endpoint is not in DND, that the caller-ID being presented is owned by the org, that the destination is not a blocked country, and that the concurrent-call cap has room — returning the approved From number on success or a controlled 403 with a reason on rejection. Signed with the jambonz webhook HMAC and not intended for direct client use. Approval only — the call still exits via the Devotel softswitch (invariant #45). Fails CLOSED (403) on a transient dependency fault rather than leaking a 503 that drops the call.
Authorizations
Dashboard JWT token from Clerk
Body
Response
Authorization verdict. status: ok approves the INVITE and echoes the approved From number; a rejected call returns HTTP 403 with status: fail and a reason.