Server-side redirect of uniform resource locator generated by contactless card

A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by a processor of a server to cause the processor to:

• receive, from a client device, a first hypertext transfer protocol (HTTP) request comprising a link, wherein a first parameter of the link comprises encrypted data generated by a contactless card and a second parameter of the link comprises an identifier of an account associated with the contactless card;
• decrypt the encrypted data;
• determine a context of the account based on attributes of the account, wherein the one or more attributes of the account include at least:
• (i) an amount of time the account has been open, and (ii) a rejected transaction using the contactless card in a transaction history of the account;
• determine an intended action associated with the request based on the determined context of the account;
• select, based on the decryption of the encrypted data and the determined intended action, a first redirect link of a plurality of redirect links;
• generate an authentication token for the account;
• transmit, to the client device, an HTTP response comprising the first redirect link, wherein the first redirect link is included in a location header field of the HTTP response, and include the authentication token as a first parameter of the first redirect link;
• receive, from the client device, a second HTTP request comprising the first redirect link and the authentication token;
• and
• transmit, to the client device, a second HTTP response comprising a resource at the first redirect link.

An apparatus, comprising:

• a processor;
• and
• a memory storing instructions which when executed by the processor, cause the processor to:
• receive, from a client device, a first hypertext transfer protocol (HTTP) request comprising a link, wherein a first parameter of the link comprises encrypted data generated by a contactless card and a second parameter of the link comprises an identifier of an account associated with the contactless card;
• decrypt the encrypted data;
• determine a context of the account based on attributes of the account, wherein the one or more attributes of the account include at least:
• (i) an amount of time the account has been open, and (ii) a rejected transaction using the contactless card in a transaction history of the account;
• determine an intended action associated with the request based on the determined context of the account;
• select, based on the decryption of the encrypted data and the determined intended action, a first redirect link of a plurality of redirect links;
• generate an authentication token for the account;
• transmit, to the client device, an HTTP response comprising the first redirect link, wherein the first redirect link is included in a location header field of the HTTP response, and include the authentication token as a first parameter of the first redirect link;
• receive, from the client device, a second HTTP request comprising the first redirect link and the authentication token;
• and
• transmit, to the client device, a second HTTP response comprising a first resource at the first redirect link.