So I read that JSON Web Encryption (JWE) uses only authenticated encryption. By that I understand, that the integrity of the payload is ensured by using something like AES-GCD.
However, I also see that JWE supports RSA-OAEP. How is integrity ensured when using RSA? Also, how can you encrypt a (typically large) JSON file with RSA? I thought RSA has a very low payload length limit.