fix: clarify error handling for HS256 signed tokens in doc

Author: amitsingh05667

src/web-auth/index.js

@@ -207,9 +207,7 @@ function WebAuth(options) {
  *
  * Only validates id_tokens signed by Auth0 using the RS256 algorithm using the public key exposed
  * by the `/.well-known/jwks.json` endpoint of your account.
- * Tokens signed with the HS256 algorithm cannot be properly validated.
- * Instead, a call to {@link userInfo} will be made with the parsed `access_token`.
- * If the {@link userInfo} call fails, the {@link userInfo} error will be passed to the callback.
+ * Tokens signed with the HS256 algorithm cannot be properly validated and will result in an error.
  * Tokens signed with other algorithms will not be accepted.
  *
  * @example
@@ -310,9 +308,7 @@ WebAuth.prototype.parseHash = function (options, cb) {
  *
  * Only validates id_tokens signed by Auth0 using the RS256 algorithm using the public key exposed
  * by the `/.well-known/jwks.json` endpoint of your account.
- * Tokens signed with the HS256 algorithm cannot be properly validated.
- * Instead, a call to {@link userInfo} will be made with the parsed `access_token`.
- * If the {@link userInfo} call fails, the {@link userInfo} error will be passed to the callback.
+ * Tokens signed with the HS256 algorithm cannot be properly validated and will result in an error.
  * Tokens signed with other algorithms will not be accepted.
  *
  * @method validateAuthenticationResponse