HTTPCallbackListenerServlet Process

The listener servlet functions in this way:

  • The servlet listens for XML/HTTP messages from external web sites.

  • Upon receiving a message, the servlet reads all of the query parameters that were sent as part of the callback URL. If the number of query parameters do not match the number of parameters sent, the servlet throws a ServletException to the third-party web site.

  • Next, the query parameters are decoded and the user is authenticated. If authentication fails, the servlet throws a ServletException.

  • When authentication succeeds, the servlet sends a response to the external web site indicating that the message was successfully received.

    Note: The servlet does not wait for the response from the published business service call. The servlet returns a standard message received response or throws an exception if the message is not received correctly.
  • The servlet then checks whether the authenticated user has authority to call the specified published business service method. If the user has authority, the published business service method is called, and the payload is passed in to the value object of the published business service method. The published business service method called from the listener must follow the methodology requirements.