Authentication for EventSub Goal subscription

To use Event Sub scopeed topics do as follows

  1. Create a website with a link to create a user token,
  2. Send the broadcaster to that website
  3. The broadcaster logs in with Twitch
  4. Completely ignore the created user token
  5. Now create an App Access Token (no scopes needed here)
  6. Subscribe to event sub using the App Access Token.

Basically you need to create a link between your ClientID and the Broadcaster via Generating a user token.
Keep that user token on file in case you need to call the API

EventSub (HTTP Transport) only uses App Access Tokens.

EventSub utilises two a token approach.
As EventSub will check if your ClientID has access to the users scoped data.

Further/longer notes on this blog post I wrote How does Twitch’s new EventSub work? – Barry Carlyon