evidencija-rezija/web-app/app/[locale]/share/proof-of-payment/combined/[id]/route.tsx

import { getDbClient } from '@/app/lib/dbClient';
import { BillingLocation } from '@evidencija-rezija/shared-code';
import { notFound } from 'next/navigation';
import { extractShareId, validateShareChecksum } from '@evidencija-rezija/shared-code';

export async function GET(request: Request, { params: { id } }: { params: { id: string } }) {
    const shareId = id;

    // Validate shareId and extract locationId
    const extracted = extractShareId(shareId);
    if (!extracted) {
        notFound();
    }

    const { locationId: locationID, checksum } = extracted;

    // Validate checksum
    if (!validateShareChecksum(locationID, checksum)) {
        notFound();
    }

    const dbClient = await getDbClient();
    const location = await dbClient.collection<BillingLocation>("lokacije")
        .findOne({ _id: locationID }, {
            projection: {
                billsProofOfPayment: 1,
                shareTTL: 1,
            }
        });

    if (!location?.billsProofOfPayment) {
        notFound();
    }

    // Check if sharing is active and not expired
    if (!location.shareTTL || new Date() > location.shareTTL) {
        notFound();
    }

    // Convert fileContentsBase64 from Base64 string to binary
    const fileContentsBuffer = Buffer.from(location.billsProofOfPayment.fileContentsBase64, 'base64');

    // Convert fileContentsBuffer to format that can be sent to the client
    const fileContents = new Uint8Array(fileContentsBuffer);

    return new Response(fileContents, {
        status: 200,
        headers: {
            'Content-Type': 'application/pdf',
            'Content-Disposition': `attachment; filename="${location.billsProofOfPayment.fileName}"`,
            'Last-Modified': `${location.billsProofOfPayment.fileLastModified}`
        }
    });
}