Event receivers and list event receivers in the SharePoint Add-in model

The approach you take to handle events in SharePoint is different in the new SharePoint Add-in model than it was with Full Trust Code.

In a typical Full Trust Code (FTC) / Farm Solution scenario, Event Receivers and List Event Receivers were created with the SharePoint

Server Side Object Model code and deployed via Solutions. In this scenario, the event receiver code runs on the SharePoint server.

In an SharePoint Add-in model scenario, event receivers are created outside of SharePoint inside a web service and registered with SharePoint. These are called as Remote Event Receivers (RER). In this scenario, the event receiver code runs on the web server where the web service is hosted.

Important

As of January 2017 SharePoint Online does support list webhooks which you can use instead of "-ed" remote event receivers. See Overview of SharePoint webhooks to learn more about webhooks. Also note that several webhook samples are available from the sp-dev-samples GitHub repository.

High-level guidelines

As a rule of a thumb, we would like to provide the following high-level guidelines for creating event receivers.

  • The service end point that implements a event receiver must be accessible by anonymous users.
  • Event receivers added to the Add-in web allow you to return an access token.
  • Event receivers added to the host web will return access token, if they are applied from app context using app access token and operation in the host web is end user driven (ItemAdded etc.)
  • AppInstalled event must complete within 30 seconds or SharePoint will think it has failed. SharePoint will rerun the event 3 times and after fourth execution SharePoint will consider add-in installation to be failed
  • Normal events like ItemAdded have also timeout of 30 seconds, but there's no retry mechanism
  • Event receivers added to host web without app context, for example with SharePointOnlineCredentials or other means, will not return access token and you'll have to access the host web with app-only access token
  • Adding event receivers to the host web is supported.
    • It is only possible to do this via CSOM/REST APIs, not by using Visual Studio wizards.
  • SharePoint will absolutely call the event receiver end points configured for a given event. However, there is no guarantee that the code in the event receiver end points will execute because the code is not running on the SharePoint server.

For example:

If the event receiver end point URL is unavailable the event receiver code will not execute. The URL might be unavailable due to several reasons. Some of the most common reasons include a misconfiguration when the end point URL is registered, DNS issues when trying to resolve the URL, or the website hosting the end point is shut down or in an inoperable state.

Additionally, if there is a bug in poorly written event receiver code there is no way to notify SharePoint the bug occurred and the event should be executed again. You can work around this to some degree with event receivers attached to SharePoint lists. See below for more information about this approach.

  • When an event receiver executes a significant amount of code an asynchronous pattern should be used.
  • See the following MSDN article for more information about timeouts in event receivers. (Search for timeout in the article.) Handle events in add-ins for SharePoint (MSDN Article)
  • When event receivers operate on SharePoint lists we recommend using a specific change tracking mechanism along with the event receiver to ensure higher quality processing.

Debugging Event Receivers

To debug event receivers you need to configure a few different things in Azure and Visual Studio. The following article provide step by step instructions and more information related to debugging.

More Examples

  • Core.EventReceivers (O365 PnP Sample)
    • This sample hows how a SharePoint Add-in can use the App Installed event to perform additional work in the host web, such as attaching event receivers to lists in the host web.
  • Core.AppEvents.HandlerDelegation (O365 PnP Sample)
    • This sample shows how to implement handlers for the AppInstalled and AppUninstalling events that:
      1. Incorporate rollback logic if the handler encounters an error.
      2. Incorporate "already done" logic to accommodate the fact that SharePoint retries the handler up to three more times if it fails or takes more than 30 seconds to complete.
      3. Use the handler delegation strategy to minimize calls from the handler web service to SharePoint.
      4. Use the CSOM classes ExceptionHandlingScope and ConditionalScope.
  • Core.AppEvents (O365 PnP Sample)
    • This sample shows how to implement handlers for the AppInstalled and AppUninstalling events that:
      1. Incorporate rollback logic if the handler encounters an error.
      2. Incorporate "already done" logic to accommodate the fact that SharePoint retries the handler up to three more times if it fails or takes more than 30 seconds to complete.

PnP samples

Applies to

  • Office 365 Multi Tenant (MT)
  • Office 365 Dedicated (D)
  • SharePoint 2013 on-premises