If the verifier trusts alg: "HS256" on a token that should be RS256, the public RSA key becomes an HMAC secret.