Given:
var signingCredentials = new Microsoft.IdentityModel.Tokens.SigningCredentials(
signingKey,
SecurityAlgorithms.HmacSha256Signature);
The JWT is listing the alg as:
{[alg, http://www.w3.org/2001/04/xmldsig-more#hmac-sha256]}
The sample public key shows RS256.
https://api.twitch.tv/api/oidc/keys
Is this a problem?