Decodes a Base64-encoded tracking payload from the url query parameter, validates it against the hash and t (Unix epoch timestamp) parameters using a shared secret, records a click/impression event (if the request is valid and not from a web crawler), then issues a 301 Moved Permanently redirect to the original destination URL. Tracking is best-effort; the redirect always occurs regardless of tracking success. Authentication is not required.

Example request data

{
    "clientId": "CORTEX",
    "sourceSystem": "campaigns",
    "sourceSystemId": "2ee98a76-15de-535d-99d0-9761536863ae",
    "originalUrl": "https://www.cortextech.io/",
    "authId": 123456,
    "metadata": {
        "promoBlockName"  : "Test Campaign",
        "rulesetId" : "5ece7bc30a892d37b4c16a8e",
        "rulesetName" : "User must be from the Maldives",
        "promoBlockVersion" : 1
    }
}