How the JWT is being verified?

[vishrantgupta]

lua-resty-jwt/lib/resty/jwt.lua

Line 535 in ee1d024

local function verify_jwe_obj(secret, jwt_obj)

Referencing to the above implementation, where secret is being used in verify_jwe_obj?