title: How JWE works with Request Object in OIDC
body: <p>I wanted to use encrypted local PASETO tokens for the <code>Request Object</code> in the OIDC, but it turns out that I need to store the key somewhere to decrypt this request object, and it must be available unencrypted/unhashed as it will need the <code>Request Object</code> to decrypt. So I will have to store it as plain text in a database? Pretty dangerous. So I started to wonder how JWE works, but the documentation from <a href="https://datatracker.ietf.org/doc/html/rfc7516#section-5.1" rel="nofollow noreferrer">https://datatracker.ietf.org/doc/html/rfc7516#section-5.1</a> about JWE encryption is quite confusing for me. Does JWE solve this problem of storing a symmetric key in a database as plain text or does it have other ways?</p>