package com.airlock.iam.flow.api.application.configuration.selection;

public interface FlowConditionConfig {
   String CONDITION_DIFFERENCE = "<ul><li><b>Access Condition</b>: This condition determines whether a user is allowed to access a service at all. If this condition is not fulfilled, there is nothing that can be done (at least not immediately). Typical examples include having a certain authentication token, or a certain static role. This condition is always checked before the Authorization Condition and if it fails, the REST response has status 403 with error code <tt>PRECONDITION_NOT_FULFILLED</tt>.</li><li><b>Authorization Condition</b>: This condition determines whether the user is currently authorized to access a service. It is expected that completing another authentication flow (step-up) would enable the user to then fulfill the condition. The typical authorization condition checks whether the user has obtained a certain tag (or combination of tags). If the condition fails, the REST response has status 403 with error code <tt>NOT_AUTHORIZED</tt>.</li></ul>";
}