Twilio Conference Status

Twilio fires 'participant-leave' / 'conference-end' on the held pickup conference. Both signal the held call is over — resolve the pending invite as expired so the banner clears even if the operator never clicked.

Signature-checked, like /voice/incoming. The guarded UPDATE makes this idempotent, but idempotence only defends against REPLAY, and invite_id is a sequential integer in a query string: a forged POST could close a stranger's live window, after which the agent stands down (its claim is gone) and nobody hangs up the caller, who stays parked on hold music with no one coming.

The invite names its own account, so the token is looked up through it. An unknown invite answers 204 rather than 404, so this cannot be used to probe which invite ids exist. Accounts with no usable Auth Token skip the check exactly as /voice/incoming does — Connect-mode rows have no token of their own, and failing closed here would break them while the front door stays open.