What?

• Improve Documentation by changing misleading function names to more appropriate.

Why?

• The now used "encrypt" and "decrypt" function names are not appropriate, because the function does not encrypt the Session payload using the new SignJWT(payload).sign(encodedKey) function. This function returns JWT signed string. If you try to decode using Base64 decoder you get the initial payload in plaintext, which can lead to unintentional usage and thinking of that the data in payload is stored in the cookie encrypted without possibility to reverse to original value and developers can think they can safely put some secret values in the payload. If you want to truly encrypt the session payload you must use the new EncryptJWT(payload).encrypt(key) function from "jose" lib

How?

• rename all "encrypt" functions and keywords with "sign"
• rename all "decrypt" functions and keywords with "verify"