Follow a tracked email link
Public, unauthenticated click-through redirect for links rewritten in outbound emails. The signature (sig) is an HMAC over the base64url target payload and the send timestamp; Orbit verifies it, records the click for engagement analytics, and redirects the recipient to the original destination. An invalid or expired signature is rejected with a 400 and never redirects, so the endpoint cannot be abused as an open redirect.
Authorizations
Dashboard JWT token from Clerk
Path Parameters
HMAC-SHA256 signature binding the target URL and send time.
Base64url-encoded payload holding the original destination URL.
Response
Redirect to the original destination URL. Sent with Referrer-Policy: no-referrer and Cache-Control: private, no-store so the signed link is never leaked or cached.