pdf generation

src/oracle/carnet-application/carnet-application.controller.ts

@@ -17,7 +17,6 @@ import { RolesGuard } from 'src/guards/roles.guard';
 import { Response } from 'express';
 import { join } from 'path';
 import { createReadStream } from 'fs';
-import { deleteFilesAsync } from 'src/utils/helper';
 
 
 @ApiTags('Carnet Application - Oracle')
@@ -158,28 +157,19 @@ export class CarnetApplicationController {
     @Post('PrintCarnet')
     @Roles('ca', 'sa', 'ua')
     async PrintCarnet(@Body() body: PrintCarnetDTO, @Res({ passthrough: true }) res: Response) {
-        const fileName = 'carnet.pdf';
-        const filePath = join(process.cwd(), 'public/carnet-pdf', fileName);
-        const filesArray = ['p2.pdf', fileName];
-
         try {
             await this.carnetApplicationService.PrintCarnet(body);
 
+            const filePath = join(process.cwd(), 'public/carnet-pdf', 'carnet.pdf');
+
             res.set({
                 'Content-Type': 'application/pdf',
-                'Content-Disposition': `attachment; filename="${fileName}"`,
+                'Content-Disposition': `attachment; filename="${'carnet.pdf'}"`,
             });
-
+            const file = createReadStream(filePath);
-            const stream = createReadStream(filePath);
+            return new StreamableFile(file);
-
-            // Clean up files after response finishes streaming
-            res.on('finish', async () => {
-                await deleteFilesAsync(filesArray);
-            });
-
-            return new StreamableFile(stream);
         } catch (error) {
-            return error.message;
+            return error.message
         }
     }
 

src/oracle/carnet-application/carnet-application.service.ts

@@ -1167,7 +1167,7 @@ export class CarnetApplicationService {
     }
 
     async PrintCarnet(body: PrintCarnetDTO) {
-
+        let filesArray = ['p2.pdf']
 
         try {
 
@@ -1220,6 +1220,8 @@ export class CarnetApplicationService {
 
         } catch (error) {
             handleError(error, CarnetApplicationService.name)
+        } finally {
+            await deleteFilesAsync([...filesArray, 'carnet.pdf']);
         }
     }
 

src/oracle/manage-holders/manage-holders.controller.ts

@@ -32,43 +32,35 @@ export class ManageHoldersController {
 
   @Get('SearchHolder/:P_SPID/:P_USERID')
   @ApiQuery({ name: "P_HOLDERNAME", type: String, required: false, description: "Optional" })
-  @ApiQuery({ name: "P_HOLDERID", type: Number, required: false, description: "Optional" })
   SearchHolder(
     @Param('P_SPID') P_SPID: number,
     @Param('P_USERID') P_USERID: string,
-    @Query('P_HOLDERID') P_HOLDERID?: number,
     @Query('P_HOLDERNAME') P_HOLDERNAME?: string | null | undefined,
   ) {
-    if (!P_USERID) {
+    let rawHolderName: string | null | undefined = P_HOLDERNAME;
-      throw new BadRequestException('User ID is required');
-    }
 
-    // Sanitize holder name
+    if (typeof rawHolderName === 'string') {
-    let rawHolderName: string | null = null;
+      rawHolderName = rawHolderName.trim();
+      rawHolderName = rawHolderName.replace(/^['"]|['"]$/g, '');
 
-    if (typeof P_HOLDERNAME === 'string') {
+      if (rawHolderName === '' || rawHolderName.toLowerCase() === 'null') {
-      const trimmed = P_HOLDERNAME.trim().replace(/^['"]|['"]$/g, '');
+        rawHolderName = null;
-      rawHolderName = trimmed === '' || trimmed.toLowerCase() === 'null' ? null : trimmed;
+      } else {
-    }
+        const allowedPattern = /^[A-Za-z0-9 _@&.-]+$/;
 
-    // Validate and coerce P_HOLDERID
+        // uncomment for strict validation
-    let holderId: number | null = null;
 
-    if (P_HOLDERID !== undefined && P_HOLDERID !== null) {
+        // if (!allowedPattern.test(rawHolderName)) {
-      const parsed = Number(P_HOLDERID);
+        //   rawHolderName = null;
-      if (isNaN(parsed)) {
+        // }
-        throw new BadRequestException('Invalid holder ID');
       }
-      holderId = parsed;
+    } else {
+      rawHolderName = null;
     }
-
+    if(!P_USERID){
-    const body = {
+      return new BadRequestException();
-      P_SPID,
+    }
-      P_USERID,
+    const body = { P_SPID,P_USERID,P_HOLDERNAME: rawHolderName }
-      P_HOLDERID: holderId,
-      P_HOLDERNAME: rawHolderName,
-    };
-
     return this.manageHoldersService.SearchHolder(body)
   }
 

src/oracle/manage-holders/manage-holders.service.ts

@@ -631,7 +631,7 @@ export class ManageHoldersService {
     }
   };
 
-  SearchHolder = async (body: { P_SPID: number, P_USERID: string, P_HOLDERID: number | null, P_HOLDERNAME: string | null }) => {
+  SearchHolder = async (body: { P_SPID: number, P_USERID: string, P_HOLDERNAME: string | null }) => {
     let connection;
 
     try {
@@ -640,12 +640,11 @@ export class ManageHoldersService {
       const result: Result<any> = await connection.execute(
         `BEGIN
             MANAGEHOLDER_PKG.SearchHolder(
-              :P_SPID, :P_HOLDERID, :P_HOLDERNAME, :P_USERID, :P_CURSOR
+              :P_SPID,  :P_HOLDERNAME, :P_USERID, :P_CURSOR
             );
         END;`,
         {
           P_SPID: { val: body.P_SPID, type: oracledb.DB_TYPE_NUMBER },
-          P_HOLDERID: { val: body.P_SPID, type: oracledb.DB_TYPE_NUMBER },
           P_HOLDERNAME: { val: body.P_HOLDERNAME, type: oracledb.DB_TYPE_NVARCHAR },
           P_USERID: { val: body.P_USERID, type: oracledb.DB_TYPE_NVARCHAR },
           P_CURSOR: { type: oracledb.CURSOR, dir: oracledb.BIND_OUT }

src/oracle/param-table/param-table.controller.ts

@@ -1,10 +1,10 @@
-import { Body, Controller, Get, Param, Patch, Post, Put, Query, UseGuards } from '@nestjs/common';
+import { Body, Controller, Get, Patch, Post, Put, Query, UseGuards } from '@nestjs/common';
 import { ApiQuery, ApiTags } from '@nestjs/swagger';
 import { ParamTableService } from './param-table.service';
 
 import {
   ActivateOrInactivateParamRecordDTO, CreateParamRecordDTO, CreateTableRecordDTO,
-  getParamValuesDTO, SPID_DTO, UpdateParamRecordDTO
+  getParamValuesDTO, UpdateParamRecordDTO
 } from 'src/dto/property.dto';
 import { Roles } from 'src/decorators/roles.decorator';
 import { JwtAuthGuard } from 'src/guards/jwt-auth.guard';
@@ -53,10 +53,10 @@ export class ParamTableController {
     return this.paramTableService.GETALLPARAMVALUES(body);
   }
 
-  @Get('GetCountriesAndMessages/:P_SPID')
+  @Get('GetCountriesAndMessages')
   @Roles('ca', 'sa', 'ua')
-  GET_COUNTRIES_AND_MESSAGES(@Param() body: SPID_DTO) {
+  GET_COUNTRIES_AND_MESSAGES() {
-    return this.paramTableService.GET_COUNTRIES_AND_MESSAGES(body);
+    return this.paramTableService.GET_COUNTRIES_AND_MESSAGES();
   }
 
   @Post('/CreateTableRecord')

src/oracle/param-table/param-table.service.ts

@@ -8,7 +8,7 @@ import { closeOracleDbConnection, fetchCursor, handleError } from 'src/utils/hel
 
 import {
   ActivateOrInactivateParamRecordDTO, CreateParamRecordDTO, CreateTableRecordDTO,
-  getParamValuesDTO, SPID_DTO, UpdateParamRecordDTO
+  getParamValuesDTO, UpdateParamRecordDTO
 } from 'src/dto/property.dto';
 
 @Injectable()
@@ -109,17 +109,16 @@ export class ParamTableService {
     }
   }
 
-  async GET_COUNTRIES_AND_MESSAGES(body: SPID_DTO) {
+  async GET_COUNTRIES_AND_MESSAGES() {
     let connection;
     try {
       connection = await this.oracleDBService.getConnection();
 
       const result = await connection.execute(
         `BEGIN
-            MANAGEPARAMTABLE_PKG.GetCountriesAndMessages(:P_SPID, :P_CURSOR);
+            MANAGEPARAMTABLE_PKG.GetCountriesAndMessages(:P_CURSOR);
           END;`,
         {
-          P_SPID: { val: body.P_SPID, type: oracledb.DB_TYPE_NUMBER },
           P_CURSOR: { type: oracledb.CURSOR, dir: oracledb.BIND_OUT }
         },
         { outFormat: oracledb.OUT_FORMAT_OBJECT }

src/utils/helper.ts

@@ -11,7 +11,6 @@ const path = require('path');
 import { PDFDocument as pdfl } from 'pdf-lib';
 import PDFMerger from 'pdf-merger-js';
 import * as fsPromises from 'fs/promises';
-import { BadRequestException as BR } from 'src/exceptions/badRequest.exception';
 
 const doc = new PDFDocument({
     size: 'A4',
@@ -22,11 +21,13 @@ const doc = new PDFDocument({
         right: 50
     }
 });
+const generalistFilePath = path.join(__dirname, '../../../public/carnet-pdf', 'p2.pdf')
+doc.pipe(fs.createWriteStream(generalistFilePath));
 
 const logger = new Logger('Helper');
 
 export const handleError = (error: any, context: string = 'UnknownService'): never => {
-    if (error instanceof BadRequestException || error instanceof BR) {
+    if (error instanceof BadRequestException) {
         logger.warn(`[${context}] ${error.message}`);
         throw error;
     }
@@ -545,9 +546,6 @@ export const generateGeneralistPDF1 = async (jsonData: pdfGLData[], headerData:
     // Finalize the PDF file
     doc.end();
 
-    const generalistFilePath = path.join(__dirname, '../../../public/carnet-pdf', 'p2.pdf')
-    doc.pipe(fs.createWriteStream(generalistFilePath));
-
     console.log('PDF created successfully!');
 
     return "p2 done";
@@ -583,9 +581,6 @@ export const generateGeneralistPDF2 = async (carnetNumber: string) => {
     // Finalize PDF
     doc.end();
 
-    const generalistFilePath = path.join(__dirname, '../../../public/carnet-pdf', 'p2.pdf')
-    doc.pipe(fs.createWriteStream(generalistFilePath));
-
     return "p2 done"
 }