docs: clarify return of general jws and jwe

Author: panva

docs/jwe/general/decrypt/functions/generalDecrypt.md

@@ -13,6 +13,14 @@ Decrypts a General JWE.
 This function is exported (as a named export) from the main `'jose'` module entry point as well
 as from its subpath export `'jose/jwe/general/decrypt'`.
 
+> [!NOTE]\
+> The function iterates over the `recipients` array in the General JWE and returns the
+> decryption result of the first recipient entry that can be successfully decrypted. The result
+> only contains the plaintext and headers of that successfully decrypted recipient entry. Other
+> recipient entries in the General JWE are not validated, and their headers are not included in
+> the returned result. Recipients of a General JWE should only rely on the returned (decrypted)
+> data.
+
 ### Parameters
 
 | Parameter | Type | Description |

docs/jws/general/verify/functions/generalVerify.md

@@ -13,6 +13,14 @@ Verifies the signature and format of and afterwards decodes the General JWS.
 This function is exported (as a named export) from the main `'jose'` module entry point as well
 as from its subpath export `'jose/jws/general/verify'`.
 
+> [!NOTE]\
+> The function iterates over the `signatures` array in the General JWS and returns the
+> verification result of the first signature entry that can be successfully verified. The result
+> only contains the payload, protected header, and unprotected header of that successfully
+> verified signature entry. Other signature entries in the General JWS are not validated, and
+> their headers are not included in the returned result. Recipients of a General JWS should only
+> rely on the returned (verified) data.
+
 ### Parameters
 
 | Parameter | Type | Description |

src/jwe/general/decrypt.ts

@@ -24,6 +24,14 @@ export interface GeneralDecryptGetKey extends types.GetKeyFunction<
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jwe/general/decrypt'`.
  *
+ * > [!NOTE]\
+ * > The function iterates over the `recipients` array in the General JWE and returns the
+ * > decryption result of the first recipient entry that can be successfully decrypted. The result
+ * > only contains the plaintext and headers of that successfully decrypted recipient entry. Other
+ * > recipient entries in the General JWE are not validated, and their headers are not included in
+ * > the returned result. Recipients of a General JWE should only rely on the returned (decrypted)
+ * > data.
+ *
  * @example
  *
  * ```js

src/jws/general/verify.ts

@@ -27,6 +27,14 @@ export interface GeneralVerifyGetKey extends types.GenericGetKeyFunction<
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jws/general/verify'`.
  *
+ * > [!NOTE]\
+ * > The function iterates over the `signatures` array in the General JWS and returns the
+ * > verification result of the first signature entry that can be successfully verified. The result
+ * > only contains the payload, protected header, and unprotected header of that successfully
+ * > verified signature entry. Other signature entries in the General JWS are not validated, and
+ * > their headers are not included in the returned result. Recipients of a General JWS should only
+ * > rely on the returned (verified) data.
+ *
  * @example
  *
  * ```js