# Protected Resources

To maximize security of the protected resources, all resources in the Gifthub API are separated into two main categories based on their relation to each part of the system: 

* **Strict:** Includes all the resources changing or showing your financial state. Such as
  * Order Creation and retrieval 
  * Customer Information 
* **Relaxed:** Includes general services available to all customers, such as
  * Product List
  * Single product retrieval

You can have access to all relaxed resources with any Jwt you generate using the `/aut/jwt` Api as long as it's not expired. To be able to have access to the strcit resources you **must** use the latest generated Jwt token generated via the authentication API. Otherwise you'll get an `403 Unauthorized` error.

### Testing access

#### Relaxed Resources

`GET : /auth/status`

**Response**

```

{
    "message": "No Message",
    "data": {
        "message": "🔓 You are in!"
    }
}

```

#### Strict Resources

`GET : /auth/strict-status`

**Response**

```

{
    "message": "No Message",
    "data": {
        "message": "🔓🔓 You are so in!"
    }
}

```