Record a click event for a tracked campaign link identified by the Hashids unique_code (decoded into click-url id + request id). Duplicate clicks from the same IP within 5 minutes are suppressed via cache. Returns a status/message envelope (no landing page HTML — use click-url/{hash_id} for that).

Path params

Auth

• Public — no bearer token (unauthenticated campaign group; item marked noauth).

Rate limit

• 30 requests/min per IP (public).

Behaviour

• 200 { status: "success", message: "Click event tracked successfully" }.
• 400 (badRequestResponse) "Invalid request" or "Click URL not found".
• 422 when unique_code is empty (route param mapped into validation; min:1).