Extension Chat Message | Unauthorized 401

Signed JWT created by the EBS, following the requirements documented in Signing the JWT (in Building Extensions ) or Twitch JWT containing the broadcaster role. The channel_id inside the JWT must match the channel ID in the request URL.

But doesn’t it means that I need to use a JWT that I sign on my EBS (and according to the docs in “Building Extensions” it means to use “role”: “external”), OR to use a different Twitch JWT that already contains the broadcaster role?