pub fn decrypt_token(encrypted: &str, secret: &str) -> Result<String, AuthError>
Decrypt a base64-encoded nonce || ciphertext string using AES-256-GCM.
nonce || ciphertext