Unencrypting for [Authorize] attribute

Question

I\'m trying to understand how I decrypt a JWE token so that the [Auhtorize] attribute can read and verify the user. I was thinking is was the Unprotect method in my CustomJw