Question: Friends and fellow users,

We have both 402 and 403 http response codes. Though, 402 is reserved for future use.

What is (or would be) the difference between these two. Payment not received should be equal to not authorized, shouldn't it?

EDIT:I would like to know the answers on a "Why 402 is required when we already have 403" angle.

Answer: 
The HTTP Statuscode 402 is indeed different from 403:

As it states in [RFC 2616](https://www.rfc-editor.org/rfc/rfc2616#section-10.4.3) the status code 402 is

```
402 Payment Required

```

That means the request is not generally forbidden but requires payment.
Apparently it is used by some services in the intended manner [List of HTTP status codes](https://en.wikipedia.org/w/index.php?title=List_of_HTTP_status_codes&oldid=925822911#4xx_Client_errors)

I think it is currently not needed (or just not used because not specified how to use) but the authors of the standard did some thought an put it in for future use which could be useful.
Note that missing a payment is only one reason to your server deny a request. You can get the "forbidden" status in other situations such as, invalid credentials, trying to access to a "private resource", etc...

I belive 402 exists just to give any more details about the reason to deny a request.