Does it a good idea to expose exception messages `throw new ResponseInteractiveRequest(new Response($e->getMessage()));`  here? . 

Attacker can play with your notify url and will see different exception messages.