Yes, to send from your EBS you must craft a JWT using your extension secret (making sure to cast channel_id in the JSON to a string)
I assumed you were doing that and not using a “client side” JWT 
Yes, to send from your EBS you must craft a JWT using your extension secret (making sure to cast channel_id in the JSON to a string)
I assumed you were doing that and not using a “client side” JWT