Arg!
I’m writing this in C# and understand the required steps to verify the message body, thanks to @BarryCarlyon and @DoctorLoktor.
I’m having trouble getting the hashes to match up. The C# implementation of the HMAC SHA256 says that it pads the key if it’s not 64 bytes. I think I’m just having issues getting my hashes to match up due to possible implementation differences between twitch’s likely Node or Go implementation and this C# implementation.