Overview#

When data is passed By-value the original data is copied

Changes made in the function to these copied values do not affect originals

If By-value data is stolen, the original data is still present even if it is Encrypted and the original data is still present can still be derived by decryption.

By-value is in contrast to passed by-reference

Tokens#

When Tokens are By-value and exposed to the Internet, they should be signed and encrypted.

More Information#

There might be more information for this subject on one of the following:

• Authorization Request
• By-reference
• Hyperlinks
• Phantom Token Flow
• Request_object_encryption_alg_values_supported
• Request_object_encryption_enc_values_supported
• Request_uri
• Token
• Variable