src/ApplicationBundle/Controller/ApprovalController.php line 262

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Controller;
  5. use ApplicationBundle\Constants\GeneralConstant;
  6. use ApplicationBundle\Constants\NotificationEventCatalogue;
  7. use ApplicationBundle\Entity\EncryptedSignature;
  8. use ApplicationBundle\Interfaces\SessionCheckInterface;
  9. use ApplicationBundle\Modules\Authentication\Constants\UserConstants;
  10. use ApplicationBundle\Modules\Api\Constants\ApiConstants;
  11. use ApplicationBundle\Modules\System\DocValidation;
  12. use ApplicationBundle\Modules\System\MiscActions;
  13. use ApplicationBundle\Modules\System\System;
  14. use ApplicationBundle\Modules\User\Users;
  15. use ApplicationBundle\Notification\NotificationEvent;
  16. use Symfony\Component\HttpFoundation\JsonResponse;
  17. use Symfony\Component\HttpFoundation\Request;
  18. use Symfony\Component\Routing\Generator\UrlGenerator;
  20. class ApprovalController extends GenericController implements SessionCheckInterface
  21. {
  22.     public function ApproveDocumentAction(Request $request)
  23.     {
  24.         $em = $this->getDoctrine()->getManager();
  26.         if ($request->isMethod('POST')) {
  27.             if (isset(GeneralConstant::$Entity_list_details[$request->request->get('approvalEntity')]['entity_view_route_path_name']))
  28.                 $url = $this->generateUrl(
  29.                     GeneralConstant::$Entity_list_details[$request->request->get('approvalEntity')]['entity_view_route_path_name']
  30.                 );
  31.             else {
  32.                 $url = '';
  33.             }
  35.             $options = array(
  36.                 'notification_enabled' => $this->container->getParameter('notification_enabled'),
  37.                 'notification_server' => $this->container->getParameter('notification_server'),
  38. //                'appId'=>$request->getSession()->get(UserConstants::USER_APP_ID),
  39. //                'url'=>$this->generateUrl(
  40. //                    GeneralConstant::$Entity_list_details[$request->request->get('approvalEntity')]['entity_view_route_path_name']
  41. //                )
  42.             );
  43.             if ($request->request->has('approvalAction')) {
  45.                 $message = System::approveDocument(
  46.                     $em,
  47.                     $options,
  48.                     $request->request->get('approvalEntity'),
  49.                     $request->request->get('approvalEntityId'),
  50.                     $request->request->get('approvalId'),
  51.                     $this->getLoggedUserLoginId($request),
  52.                     $request->request->get('approvalAction'),
  53.                     $request->request->get('approvalNote'),
  54.                     $request->request->get('approvalHash'),
  55.                     $url,
  56.                     $request->request->get('forwardTo'),
  57.                     $this->get('mail_module'),
  58.                     $request->request->get('approvedAmount')   // partial approval (expense): reduce to this if < current
  59.                 );
  61.                 // ── Notify the next approver(s) in line ──────────────────────
  62.                 // approveDocument() returns userIdList = next pending approvers.
  63.                 // We notify them that a document is now waiting for their approval.
  64.                 if ($message['success'] == true && !empty($message['userIdList'])) {
  65.                     $entityAlias = GeneralConstant::$Entity_list_details[$request->request->get('approvalEntity')]['entity_alias'] ?? 'Document';
  66.                     /** @var \ApplicationBundle\Service\NotificationDispatcher $dispatcher */
  67.                     $dispatcher = $this->get('app.notification_dispatcher');
  68.                     $dispatcher->dispatchDirect(
  69.                         \ApplicationBundle\Notification\NotificationEvent::make(
  70.                             \ApplicationBundle\Constants\NotificationEventCatalogue::DOC_AWAITING_MY_APPROVAL,
  71.                             (int) $request->getSession()->get(UserConstants::USER_COMPANY_ID),
  72.                             (int) $request->getSession()->get(UserConstants::USER_APP_ID),
  73.                             [
  74.                                 'entityType'   => $entityAlias,
  75.                                 'documentHash' => $message['docHash'] ?? '',
  76.                                 'targetRoute'  => GeneralConstant::$Entity_list_details[$request->request->get('approvalEntity')]['entity_view_route_path_name'] ?? '',
  77.                                 'targetId'     => $request->request->get('approvalEntityId'),
  78.                                 'actorUserId'  => (int) $request->getSession()->get(UserConstants::USER_ID),
  79.                             ]
  80.                         ),
  81.                         array_map('intval', $message['userIdList'])
  82.                     );
  83.                 }
  85. //            $this->addFlash(
  86. //                $message[0],
  87. //                $message[1]
  88. //            );
  89.                 if ($message['success'] == true)
  90.                     return new JsonResponse(array("success" => true,
  91.                             'message' => $message,
  92.                             'approvalEntity' => $request->request->get('approvalEntity'),
  93.                             'approvalEntityId' => $request->request->get('approvalEntityId'),
  94.                             'approvalId' => $request->request->get('approvalId'),
  95.                             'approvalAction' => $request->request->get('approvalAction'),
  96.                         )
  97.                     );
  98.                 else
  99.                     return new JsonResponse(array("success" => false, 'message' => $message,
  100.                             'approvalEntity' => $request->request->get('approvalEntity'),
  101.                             'approvalEntityId' => $request->request->get('approvalEntityId'),
  102.                             'approvalId' => $request->request->get('approvalId'),
  103.                             'approvalAction' => $request->request->get('approvalAction'),
  104.                         )
  106.                     );
  107.             }
  108.             return new JsonResponse(array("success" => false));
  109.         }
  111. //        $userList=$this->get('user_module')->showUserList();
  113.         return new JsonResponse(array("success" => false));
  114.     }
  116.     public function getPendingApprovalListForUserAction(Request $request)
  117.     {
  118.         $em = $this->getDoctrine()->getManager();
  119.         $session = $request->getSession();
  120.         $currentDateTime = new \DateTime();
  121.         $currTs = $currentDateTime->format('U');
  122.         $tvp = $this->get('url_encryptor')->encrypt(json_encode(
  123.             array(
  124.                 'timeout' => 1 * $currTs + 3600,
  125.                 'token' => $session->get('token', 0),
  127.             )
  128.         ));
  131.         $absoluteUrlList = [];
  132.         $filterApprovalEntityId=$request->request->get('entity','_all_');
  133.         foreach (GeneralConstant::$Entity_list_details as $e => $d) {
  134.             if (isset($d['entity_view_route_path_name']))
  135.                 $absoluteUrlList[$e] = $this->generateUrl($d['entity_view_route_path_name'], [], UrlGenerator::ABSOLUTE_URL);
  136.         }
  139.         return new JsonResponse(System::getPendingApprovalListByUserLoginId($em, $this->getLoggedUserLoginId($request), 1, $absoluteUrlList, $tvp,$filterApprovalEntityId));
  141.     }
  143.     public function getPendingApprovalListForAppAction(Request $request)
  144.     {
  145.         $em = $this->getDoctrine()->getManager();
  147.         $absoluteUrlList = [];
  148.         $session = $request->getSession();
  149.         $currentDateTime = new \DateTime();
  150.         $currTs = $currentDateTime->format('U');
  151.         $absoluteUrl = $this->generateUrl('dashboard', [], UrlGenerator::ABSOLUTE_URL);
  152.         $tvp = $this->get('url_encryptor')->encrypt(json_encode(
  153.             array(
  154.                 'timeout' => 1 * $currTs + 3600,
  155.                 'token' => $session->get('token', 0),
  157.             )
  158.         ));
  160.         foreach (GeneralConstant::$Entity_list_details as $e => $d) {
  161.             if (isset($d['entity_view_route_path_name']))
  162.                 $absoluteUrlList[$e] = $this->generateUrl(isset($d['entity_print_route_path_name']) ? $d['entity_print_route_path_name'] : $d['entity_view_route_path_name'], [], UrlGenerator::ABSOLUTE_URL);
  163.         }
  166.         return new JsonResponse(System::getPendinDocumentListForAppByUserLoginId($em, $this->getLoggedUserLoginId($request), 1, $absoluteUrlList, $tvp,'_all_',
  167.             $request->query->get('page', '_UNSET_'),
  168.             $request->query->get('offset', 0),
  169.             $request->query->get('limit', 999999),
  170.             $absoluteUrl
  171.         ));
  172. //        $em = $this->getDoctrine()->getManager();
  173. //
  174. //        $absoluteUrlList = [];
  175. //        foreach (GeneralConstant::$Entity_list_details as $e => $d) {
  176. //            if (isset($d['entity_view_route_path_name']))
  177. //                $absoluteUrlList[$e] = $this->generateUrl(isset($d['entity_print_route_path_name']) ? $d['entity_print_route_path_name'] : $d['entity_view_route_path_name'], [], UrlGenerator::ABSOLUTE_URL);
  178. //        }
  179. //        $session = $request->getSession();
  180. //        $currentDateTime = new \DateTime();
  181. //        $currTs = $currentDateTime->format('U');
  182. //        $tvp = $this->get('url_encryptor')->encrypt(json_encode(
  183. //            array(
  184. //                'timeout' => 1 * $currTs + 3600,
  185. //                'token' => $session->get('token', 0),
  186. //
  187. //            )
  188. //        ));
  189. //
  190. //
  191. //        return new JsonResponse(System::getPendinDocumentListForAppByUserLoginId($em, $this->getLoggedUserLoginId($request), 1, $absoluteUrlList,
  192. //            $tvp,
  193. //            $request->query->get('page', '_UNSET_'),
  194. //            $request->query->get('offset', 0),
  195. //            $request->query->get('limit', 999999)
  196. //        ));
  198.     }
  200.     public function getMyDocumentListForAppAction(Request $request)
  201.     {
  202.         $em = $this->getDoctrine()->getManager();
  204.         $absoluteUrlList = [];
  205.         $session = $request->getSession();
  206.         $currentDateTime = new \DateTime();
  207.         $currTs = $currentDateTime->format('U');
  208.         $absoluteUrl = $this->generateUrl('dashboard', [], UrlGenerator::ABSOLUTE_URL);
  209.         $tvp = $this->get('url_encryptor')->encrypt(json_encode(
  210.             array(
  211.                 'timeout' => 1 * $currTs + 3600,
  212.                 'token' => $session->get('token', 0),
  214.             )
  215.         ));
  217.         foreach (GeneralConstant::$Entity_list_details as $e => $d) {
  218.             if (isset($d['entity_view_route_path_name']))
  219.                 $absoluteUrlList[$e] = $this->generateUrl(isset($d['entity_print_route_path_name']) ? $d['entity_print_route_path_name'] : $d['entity_view_route_path_name'], [], UrlGenerator::ABSOLUTE_URL);
  220.         }
  223.         return new JsonResponse(System::getMyDocumentListForAppByUserLoginId($em, $this->getLoggedUserLoginId($request),$absoluteUrl, 1, $absoluteUrlList, $tvp,'_all_',
  224.             $request->query->get('page', '_UNSET_'),
  225.             $request->query->get('limit', 999999)
  227.         ));
  228. //        $em = $this->getDoctrine()->getManager();
  229. //
  230. //        $absoluteUrlList = [];
  231. //        foreach (GeneralConstant::$Entity_list_details as $e => $d) {
  232. //            if (isset($d['entity_view_route_path_name']))
  233. //                $absoluteUrlList[$e] = $this->generateUrl(isset($d['entity_print_route_path_name']) ? $d['entity_print_route_path_name'] : $d['entity_view_route_path_name'], [], UrlGenerator::ABSOLUTE_URL);
  234. //        }
  235. //        $session = $request->getSession();
  236. //        $currentDateTime = new \DateTime();
  237. //        $currTs = $currentDateTime->format('U');
  238. //        $tvp = $this->get('url_encryptor')->encrypt(json_encode(
  239. //            array(
  240. //                'timeout' => 1 * $currTs + 3600,
  241. //                'token' => $session->get('token', 0),
  242. //
  243. //            )
  244. //        ));
  245. //
  246. //
  247. //        return new JsonResponse(System::getPendinDocumentListForAppByUserLoginId($em, $this->getLoggedUserLoginId($request), 1, $absoluteUrlList,
  248. //            $tvp,
  249. //            $request->query->get('page', '_UNSET_'),
  250. //            $request->query->get('offset', 0),
  251. //            $request->query->get('limit', 999999)
  252. //        ));
  254.     }
  256.     /**
  257.      * First-run guard: does the logged-in user have a usable signature yet?
  258.      * Used by the first-login modal so a new user is prompted to set their
  259.      * signature + approval hash BEFORE they hit an approval action and get stuck.
  260.      * Local-only check (cheap); a central copy is pulled lazily on first verify.
  261.      */
  262.     public function SignatureStatusAction(Request $request)
  263.     {
  264.         $em = $this->getDoctrine()->getManager();
  265.         $userId = $request->getSession()->get('userId');
  266.         $has = false;
  267.         if ($userId) {
  268.             $rec = $em->getRepository('ApplicationBundle\\Entity\\EncryptedSignature')
  269.                 ->findOneBy(['userId' => $userId]);
  270.             $has = ($rec && $rec->getData());
  271.         }
  272.         return new JsonResponse(['hasSignature' => (bool) $has]);
  273.     }
  275.     /**
  276.      * App: does the logged-in user have an approval signature yet? Lets the
  277.      * mobile client route between "enter your existing PIN" and "create a
  278.      * new PIN" on first use.
  279.      */
  280.     public function SignatureStatusForAppAction(Request $request)
  281.     {
  282.         $em = $this->getDoctrine()->getManager();
  283.         $userId = $request->getSession()->get('userId');
  284.         $has = false;
  285.         if ($userId) {
  286.             $rec = $em->getRepository('ApplicationBundle\\Entity\\EncryptedSignature')
  287.                 ->findOneBy(['userId' => $userId]);
  288.             $has = ($rec && $rec->getData());
  289.         }
  290.         return new JsonResponse(array('success' => true, 'hasSignature' => (bool) $has));
  291.     }
  293.     /**
  294.      * App: set or change the approval hash WITHOUT the ERP web. Mirrors
  295.      * UpdateSignatureAction, minus the mandatory image upload:
  296.      *   - first-time set → a simple name-stamp signature image is generated
  297.      *     server-side and encrypted under the new hash;
  298.      *   - change → the current hash must verify first, and the existing
  299.      *     signature image is preserved (re-encrypted under the new hash).
  300.      * Synced to CENTRAL exactly like the web flow.
  301.      */
  302.     public function SetSignatureForAppAction(Request $request)
  303.     {
  304.         $em = $this->getDoctrine()->getManager();
  305.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  306.         $session = $request->getSession();
  307.         $userId = $session->get('userId');
  308.         $companyId = $session->get('userCompanyId');
  309.         $loginId = $this->getLoggedUserLoginId($request);
  311.         $newHash = trim((string) $request->request->get('newHash', ''));
  312.         $oldHash = trim((string) $request->request->get('oldHash', ''));
  313.         if ($userId == null || $loginId == null) {
  314.             return new JsonResponse(array('success' => false, 'message' => 'Not signed in.'));
  315.         }
  316.         if (strlen($newHash) < 4) {
  317.             return new JsonResponse(array('success' => false, 'message' => 'PIN must be at least 4 characters.'));
  318.         }
  320.         $repo = $em->getRepository('ApplicationBundle\\Entity\\EncryptedSignature');
  321.         $record = $repo->findOneBy(['userId' => $userId]);
  323.         if ($record && $record->getData()) {
  324.             // Changing an existing hash: the current one must verify, and we
  325.             // keep the user's existing signature image.
  326.             if ($oldHash === '') {
  327.                 return new JsonResponse(array('success' => false, 'message' => 'Your current PIN is required to change it.'));
  328.             }
  329.             $check = DocValidation::isSignatureOk($em, $loginId, $oldHash, 1);
  330.             if (!isset($check['success']) || $check['success'] != true) {
  331.                 return new JsonResponse(array('success' => false, 'message' => 'Current PIN did not match.'));
  332.             }
  333.             $imageData = $check['data'];
  334.         } else {
  335.             // First-time set from the app: no drawn signature exists, so
  336.             // generate a clean name-stamp image to act as the signature.
  337.             $user_data = Users::getUserInfoByLoginId($em, $loginId);
  338.             $name = isset($user_data['name']) && $user_data['name'] != '' ? $user_data['name'] : 'Approved';
  339.             $img = imagecreatetruecolor(240, 80);
  340.             $bg = imagecolorallocate($img, 255, 255, 255);
  341.             imagefilledrectangle($img, 0, 0, 240, 80, $bg);
  342.             $fg = imagecolorallocate($img, 26, 28, 28);
  343.             imagestring($img, 5, 12, 32, substr($name, 0, 26), $fg);
  344.             ob_start();
  345.             imagepng($img);
  346.             $png = ob_get_clean();
  347.             imagedestroy($img);
  348.             $imageData = base64_encode($png);
  349.         }
  351.         $encoded = System::encryptSignature($imageData, $newHash);
  352.         if ($encoded === false) {
  353.             return new JsonResponse(array('success' => false, 'message' => 'Could not secure the signature. Try again.'));
  354.         }
  356.         if (!$record) {
  357.             $record = new \ApplicationBundle\Entity\EncryptedSignature();
  358.             $record->setUserId($userId);
  359.             $record->setCreatedAt(new \DateTime());
  360.         }
  361.         $record->setCompanyId($companyId);
  362.         $record->setData($encoded);
  363.         $record->setSigExists(0);
  364.         $record->setLastDecryptedSigId(0);
  365.         $record->setUpdatedAt(new \DateTime());
  366.         $em->persist($record);
  367.         $em->flush();
  369.         // Sync to CENTRAL (same contract as the web UpdateSignatureAction).
  370.         if ($systemType !== '_CENTRAL_') {
  371.             $applicantId = null;
  372.             $sysUser = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(['userId' => $userId]);
  373.             if ($sysUser) {
  374.                 $applicantId = $sysUser->getGlobalId();
  375.             }
  376.             $curl = curl_init();
  377.             curl_setopt_array($curl, [
  378.                 CURLOPT_RETURNTRANSFER => true,
  379.                 CURLOPT_POST => true,
  380.                 CURLOPT_URL => GeneralConstant::HONEYBEE_CENTRAL_SERVER . '/SyncSignatureToCentral',
  381.                 CURLOPT_CONNECTTIMEOUT => 10,
  382.                 CURLOPT_SSL_VERIFYPEER => false,
  383.                 CURLOPT_SSL_VERIFYHOST => false,
  384.                 CURLOPT_HTTPHEADER => [
  385.                     'Accept: application/json',
  386.                     'Content-Type: application/json'
  387.                 ],
  388.                 CURLOPT_POSTFIELDS => json_encode([
  389.                     'userId' => $userId,
  390.                     'approvalHash' => $newHash,
  391.                     'signatureData' => $encoded,
  392.                     'companyId' => $companyId,
  393.                     'applicantId' => $applicantId
  394.                 ])
  395.             ]);
  396.             curl_exec($curl);
  397.             curl_close($curl);
  398.         }
  400.         return new JsonResponse(array(
  401.             'success' => true,
  402.             'hasSignature' => true,
  403.             'message' => 'Approval PIN saved.'
  404.         ));
  405.     }
  407.     public function UpdateSignatureAction(Request $request)
  408.     {
  409.         $em = $this->getDoctrine()->getManager();
  410.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  413.         $session = $request->getSession();
  414.         $userId = $session->get('userId');
  415.         $companyId = $session->get('userCompanyId');
  416.         $appId = $session->get('userAppId');
  417.         $user = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(['userId' => $userId]);
  419.         $applicantId = $user->getGlobalId();
  420.         $user_data = Users::getUserInfoByLoginId($em, $this->getLoggedUserLoginId($request));
  421.         $g_path = '';
  423.         if ($request->isMethod('POST')) {
  424.             $path = "";
  425.             $extension_here = '';
  426.             foreach ($request->files as $uploadedFile) {
  427.                 if ($uploadedFile != null) {
  428.                     $extension_here = $uploadedFile->guessExtension();
  429.                     $fileName = md5(uniqid()) . '.' . $extension_here;
  430.                     $path = $fileName;
  431.                     $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/FileUploads/';
  432.                     if (!file_exists($upl_dir)) {
  433.                         mkdir($upl_dir, 0777, true);
  434.                     }
  435.                     $file = $uploadedFile->move($upl_dir, $path);
  436.                 }
  437.             }
  439.             if ($path != "") {
  440.                 $file_path = 'uploads/FileUploads/' . $path;
  441.                 $g_path = $this->container->getParameter('kernel.root_dir') . '/../web/' . $file_path;
  443.                 list($width, $height) = getimagesize($g_path);
  444.                 $percent = (200 / $width);
  445.                 $newwidth = $width * $percent;
  446.                 $newheight = $height * $percent;
  448.                 $thumb = imagecreatetruecolor($newwidth, $newheight);
  449.                 $source = ($extension_here == 'png') ? imagecreatefrompng($g_path) : imagecreatefromjpeg($g_path);
  450.                 imagecopyresampled($thumb, $source, 0, 0, 0, 0, $newwidth, $newheight, $width, $height);
  452.                 $thumbPath = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/FileUploads/th.png';
  453.                 imagepng($thumb, $thumbPath);
  454.                 $th_file = file_get_contents($thumbPath);
  456.                 $image_data = base64_encode($th_file);
  457.                 $encoded_data = System::encryptSignature($image_data, $request->request->get('approvalHash'));
  459.                 if ($encoded_data !== false) {
  460.                     $repo = $em->getRepository('ApplicationBundle\\Entity\\EncryptedSignature');
  461.                     $record = $repo->findOneBy(['userId' => $userId]);
  463.                     if (!$record) {
  464.                         $record = new \ApplicationBundle\Entity\EncryptedSignature();
  465.                         $record->setUserId($userId);
  466.                         $record->setCreatedAt(new \DateTime());
  467.                     }
  469.                     $record->setCompanyId($companyId);
  470.                     $record->setData($encoded_data);
  471.                     $record->setSigExists(0);
  472.                     $record->setLastDecryptedSigId(0);
  473.                     $record->setUpdatedAt(new \DateTime());
  474.                     $em->persist($record);
  475.                     $em->flush();
  477.                     // Sync to central server
  478.                     if ($systemType !== '_CENTRAL_') {
  479.                         $centralUrl = GeneralConstant::HONEYBEE_CENTRAL_SERVER . '/SyncSignatureToCentral';
  480.                         $payload = [
  481.                             'userId' => $userId,
  482.                             'approvalHash' => $request->request->get('approvalHash'),
  483.                             'signatureData' => $encoded_data,
  484.                             'companyId' => $companyId,
  485.                             'applicantId' => $applicantId
  486.                         ];
  488.                         $curl = curl_init();
  489.                         curl_setopt_array($curl, [
  490.                             CURLOPT_RETURNTRANSFER => true,
  491.                             CURLOPT_POST => true,
  492.                             CURLOPT_URL => $centralUrl,
  493.                             CURLOPT_CONNECTTIMEOUT => 10,
  494.                             CURLOPT_SSL_VERIFYPEER => false,
  495.                             CURLOPT_SSL_VERIFYHOST => false,
  496.                             CURLOPT_HTTPHEADER => [
  497.                                 'Accept: application/json',
  498.                                 'Content-Type: application/json'
  499.                             ],
  500.                             CURLOPT_POSTFIELDS => json_encode($payload)
  501.                         ]);
  503.                         $retData = curl_exec($curl);
  504.                         $err = curl_error($curl);
  505.                         curl_close($curl);
  507. //                             return new JsonResponse($retData);
  509.                         if ($err) {
  510.                             $this->addFlash('error', 'Signature sent failed: ' . $err);
  511.                         } else {
  512.                             $response = json_decode($retData, true);
  513.                             if (isset($response['success']) && $response['success'] === true) {
  514.                                 $this->addFlash('success', 'Signature synced successfully to CENTRAL.');
  515.                             } else {
  516.                                 $this->addFlash('error', 'CENTRAL server error: ' . ($response['message'] ?? 'Unknown error.'));
  517.                             }
  518.                         }
  519.                     }
  520.                 }
  522.                 // Delete temp files
  523.                 @unlink($g_path);
  524.                 @unlink($thumbPath);
  525.             }
  527.             // First-run modal posts with a redirectTo so the user lands back where
  528.             // they were (instead of the settings page) once the signature is set.
  529.             $redirectTo = $request->request->get('redirectTo');
  530.             if ($redirectTo) {
  531.                 return $this->redirect($redirectTo);
  532.             }
  533.         }
  535.         return $this->render('@System/pages/settings/update_signature.html.twig', [
  536.             'page_title' => 'Update Signature',
  537.             'user_data' => $user_data,
  538.             'path' => $g_path
  539.         ]);
  540.     }
  543.     public function SignatureCheckFromCentralAction(Request $request)
  544.     {
  545.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  547.         if ($systemType !== '_CENTRAL_') {
  548.             return new JsonResponse(['success' => false, 'message' => 'Only allowed on CENTRAL server.'], 403);
  549.         }
  551.         $em = $this->getDoctrine()->getManager('company_group');
  552.         $em->getConnection()->connect();
  554.         $data = json_decode($request->getContent(), true);
  556.         if (
  557.             !$data ||
  558.             !isset($data['userId']) ||
  559.             !isset($data['companyId']) ||
  560.             !isset($data['signatureData']) ||
  561.             !isset($data['approvalHash']) ||
  562.             !isset($data['applicantId'])
  563.         ) {
  564.             return new JsonResponse(['success' => false, 'message' => 'Missing parameters.'], 400);
  565.         }
  567.         $userId = $data['userId'];
  568.         $companyId = $data['companyId'];
  569.         $signatureData = $data['signatureData'];
  570.         $approvalHash = $data['approvalHash'];
  571.         $applicantId = $data['applicantId'];
  573.         try {
  574.             $centralUser = $em
  575.                 ->getRepository("CompanyGroupBundle\\Entity\\EntityApplicantDetails")
  576.                 ->findOneBy(['applicantId' => $applicantId]);
  578.             if (!$centralUser) {
  579.                 return new JsonResponse(['success' => false, 'message' => 'Central user not found.'], 404);
  580.             }
  582.             $userAppIds = json_decode($centralUser->getUserAppIds(), true);
  583.             if (!is_array($userAppIds)) $userAppIds = [];
  585.             $companies = $em->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')->findBy([
  586.                 'appId' => $userAppIds
  587.             ]);
  589.             if (count($companies) < 1) {
  590.                 return new JsonResponse(['success' => false, 'message' => 'No companies found for userAppIds.'], 404);
  591.             }
  593.             $repo = $em->getRepository('CompanyGroupBundle\\Entity\\EntitySignature');
  594.             $record = $repo->findOneBy(['userId' => $userId]);
  596.             if (!$record) {
  597.                 $record = new \CompanyGroupBundle\Entity\EntitySignature();
  598.                 $record->setUserId($applicantId);
  599.                 $record->setCreatedAt(new \DateTime());
  600.             }
  602.             $record->setCompanyId($companyId);
  603.             $record->setApplicantId($applicantId);
  604.             $record->setData($signatureData);
  605.             $record->setSigExists(0);
  606.             $record->setLastDecryptedSigId(0);
  607.             $record->setUpdatedAt(new \DateTime());
  608.             $em->persist($record);
  609.             $em->flush();
  610.             $dataByServerId = [];
  611.             $gocDataListByAppId = [];
  612.             foreach ($companies as $entry) {
  613.                 $gocDataListByAppId[$entry->getAppId()] = [
  614.                     'dbName' => $entry->getDbName(),
  615.                     'dbUser' => $entry->getDbUser(),
  616.                     'dbPass' => $entry->getDbPass(),
  617.                     'dbHost' => $entry->getDbHost(),
  618.                     'serverAddress' => $entry->getCompanyGroupServerAddress(),
  619.                     'port' => $entry->getCompanyGroupServerPort() ?: 80,
  620.                     'appId' => $entry->getAppId(),
  621.                     'serverId' => $entry->getCompanyGroupServerId(),
  622.                 ];
  623.                 if (!isset($dataByServerId[$entry->getCompanyGroupServerId()]))
  624.                     $dataByServerId[$entry->getCompanyGroupServerId()] = array(
  627.                         'serverId' => $entry->getCompanyGroupServerId(),
  628.                         'serverAddress' => $entry->getCompanyGroupServerAddress(),
  629.                         'port' => $entry->getCompanyGroupServerPort() ?: 80,
  630.                         'payload' => array(
  631.                             'globalId' => $applicantId,
  632.                             'companyId' => $userAppIds,
  633.                             'signatureData' => $signatureData,
  634. //                                      'approvalHash' => $approvalHash
  635.                         )
  636.                     );
  637.             }
  640.             $urls = [];
  643.             foreach ($dataByServerId as $entry) {
  644.                 $serverAddress = $entry['serverAddress'];
  645.                 if (!$serverAddress) continue;
  648. //                     $connector = $this->container->get('application_connector');
  649. //                     $connector->resetConnection(
  650. //                         'default',
  651. //                         $entry['dbName'],
  652. //                         $entry['dbUser'],
  653. //                         $entry['dbPass'],
  654. //                         $entry['dbHost'],
  655. //                         $reset = true
  656. //                     );
  659.                 $syncUrl = $serverAddress . '/ReceiveSignatureFromCentral';
  661.                 $payload = $entry['payload'];
  663.                 $curl = curl_init();
  664.                 curl_setopt_array($curl, [
  665.                     CURLOPT_RETURNTRANSFER => true,
  666.                     CURLOPT_POST => true,
  667.                     CURLOPT_URL => $syncUrl,
  668. //                         CURLOPT_PORT => $entry['port'],
  669.                     CURLOPT_CONNECTTIMEOUT => 10,
  670.                     CURLOPT_SSL_VERIFYPEER => false,
  671.                     CURLOPT_SSL_VERIFYHOST => false,
  672.                     CURLOPT_HTTPHEADER => [
  673.                         'Accept: application/json',
  674.                         'Content-Type: application/json'
  675.                     ],
  676.                     CURLOPT_POSTFIELDS => json_encode($payload)
  677.                 ]);
  679.                 $response = curl_exec($curl);
  680.                 $err = curl_error($curl);
  681.                 $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
  682.                 curl_close($curl);
  685. //                     if ($err) {
  686. //                         error_log("ERP Sync Error [AppID $appId]: $err");
  687. //                          $urls[]=$err;
  688. //                     } else {
  689. //                         error_log("ERP Sync Response [AppID $appId] (HTTP $httpCode): $response");
  690. //                         $res = json_decode($response, true);
  691. //                         if (!isset($res['success']) || !$res['success']) {
  692. //                             error_log("❗ ERP Sync error for AppID $appId: " . ($res['message'] ?? 'Unknown'));
  693. //                         }
  694. //
  695. //                      $urls[]=$response;
  696. //                     }
  697.             }
  700.             return new JsonResponse(['success' => true, 'message' => 'Signature synced successfully.']);
  702.         } catch (\Exception $e) {
  703.             return new JsonResponse(['success' => false, 'message' => 'DB error: ' . $e->getMessage()], 500);
  704.         }
  705.     }
  708.     public function ReceiveSignatureFromCentralAction(Request $request)
  709.     {
  710.         $data = json_decode($request->getContent(), true);
  712.         if (
  713.             !$data ||
  714.             !isset($data['globalId']) ||
  715.             !isset($data['companyId']) ||
  716.             !isset($data['signatureData'])
  717.         ) {
  718.             return new JsonResponse(['success' => false, 'message' => 'Missing required fields'], 400);
  719.         }
  721.         $em_goc = $this->getDoctrine()->getManager('company_group');
  723.         $globalId = $data['globalId'];
  724.         $signatureData = $data['signatureData'];
  725.         $companyId = $data['companyId'];
  727.         $companies = $em_goc->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')->findBy([
  728.             'appId' => $companyId
  729.         ]);
  732.         foreach ($companies as $entry) {
  733.             $goc = [
  734.                 'dbName' => $entry->getDbName(),
  735.                 'dbUser' => $entry->getDbUser(),
  736.                 'dbPass' => $entry->getDbPass(),
  737.                 'dbHost' => $entry->getDbHost(),
  738.                 'serverAddress' => $entry->getCompanyGroupServerAddress(),
  739.                 'port' => $entry->getCompanyGroupServerPort() ?: 80,
  740.                 'appId' => $entry->getAppId(),
  741. //                                 'serverId' => $entry->getServerId(),
  742.             ];
  747.             $connector = $this->container->get('application_connector');
  748.             $connector->resetConnection(
  749.                 'default',
  750.                 $goc['dbName'],
  751.                 $goc['dbUser'],
  752.                 $goc['dbPass'],
  753.                 $goc['dbHost'],
  754.                 $reset = true
  755.             );
  757.             $em = $this->getDoctrine()->getManager();
  759.             $user = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(['globalId' => $globalId]);
  761.             if (!$user) {
  762.                 return new JsonResponse(['success' => false, 'message' => 'User not found'], 404);
  763.             }
  765.             $sig = $em->getRepository('ApplicationBundle\\Entity\\EncryptedSignature')->findOneBy(['userId' => $user->getUserId()]);
  767.             if (!$sig) {
  768.                 $sig = new \ApplicationBundle\Entity\EncryptedSignature();
  769.                 $sig->setUserId($user->getUserId());
  770.                 $sig->setData($signatureData);
  771.                 $sig->setCreatedAt(new \DateTime());
  772.             }
  774.             $sig->setCompanyId($companyId);
  775.             $sig->setData($signatureData);
  776.             $sig->setSigExists(1);
  777.             $sig->setLastDecryptedSigId(0);
  778.             $sig->setUpdatedAt(new \DateTime());
  780.             $em->persist($sig);
  781.             $em->flush();
  784.         }
  787.         return new JsonResponse(['success' => true, 'message' => 'Signature updated in ERP']);
  788.     }
  791.     public function CheckSignatureHashAction(Request $request)
  792.     {
  793.         $details_ids = [];
  794.         $em = $this->getDoctrine()->getManager();
  795.         if ($request->isMethod('POST')) {
  796.             $em = $this->getDoctrine()->getManager();
  798.             $loginId = $request->getSession()->get(UserConstants::USER_LOGIN_ID);
  800.             $approveHash = $request->request->get('approvalHash');
  802. //
  803.             $retData = DocValidation::isSignatureOk($em, $loginId, $approveHash, 1);
  804. //            $this->addFlash(
  805. //                'success',
  806. //                'New Transaction Added.'
  807. //            );
  808.             return new JsonResponse(array(
  809.                 "success" => $retData['success'],
  810.                 "data" => $retData['data'],
  812.             ));
  814.         }
  817.         return $this->render('@Application/pages/accounts/input_forms/payment_voucher.html.twig',
  818.             array(
  820.                 'test' => $details_ids,
  822.             )
  823.         );
  824.     }
  826.     public function CheckSignatureHashForAppAction(Request $request)
  827.     {
  828.         $details_ids = [];
  829.         $em = $this->getDoctrine()->getManager();
  830.         if ($request->isMethod('POST')) {
  831.             $em = $this->getDoctrine()->getManager();
  833.             $loginId = $request->getSession()->get(UserConstants::USER_LOGIN_ID);
  835.             $approveHash = $request->request->get('approvalHash');
  837. //
  838.             $retData = DocValidation::isSignatureOk($em, $loginId, $approveHash, 1);
  839. //            $this->addFlash(
  840. //                'success',
  841. //                'New Transaction Added.'
  842. //            );
  843.             return new JsonResponse(array(
  844.                 "success" => $retData['success'],
  845. //                "data"=>$retData['data'],
  847.             ));
  849.         }
  851.         return $this->render('@Application/pages/accounts/input_forms/payment_voucher.html.twig',
  852.             array(
  854.                 'test' => $details_ids,
  856.             )
  857.         );
  858.     }
  860.     public function approvalRoleAction()
  861.     {
  862.         $approvalRole = GeneralConstant::$approvalRoleList;
  863.         return new JsonResponse($approvalRole);
  864.     }
  866.     public function PendingApprovalListAction(Request $request)
  867.     {
  868.         $em = $this->getDoctrine()->getManager();
  869.         $login_id = $this->getLoggedUserLoginId($request);
  871.         $pending_data = System::getPendingApprovalListByUserLoginId($em, $login_id);
  872. //        $user_data=Users::getUserInfoByLoginId($em,$login_id);
  873.         //1st get only currently pendings
  875.         if ($request->request->has('getSummaryData'))
  876.             $pending_data = MiscActions::getSummaryData($em, $pending_data);
  877.         $pending_approval_list = $pending_data['pending_approval_list'];
  878.         $override_approval_list = $pending_data['override_approval_list'];
  879.         if ($request->request->has('returnJson')) {
  880.             return new JsonResponse(
  881.                 array(
  882.                     'success' => true,
  883.                     'page_title' => 'View',
  884.                     'override_approval_list' => $override_approval_list,
  885.                     'pending_approval_list' => $pending_approval_list
  886. //                'productByCodeData' => $productByCodeData,
  887. //                'productData' => $productData,
  888. //                'currInvList' => $currInvList,
  889. //                'productList' => Inventory::ProductList($em, $companyId),
  890. //                'subCategoryList' => Inventory::ProductSubCategoryList($em, $companyId),
  891. //                'categoryList' => Inventory::ProductCategoryList($em, $companyId),
  892. //                'igList' => Inventory::ItemGroupList($em, $companyId),
  893. //                'unitList' => Inventory::UnitTypeList($em),
  894. //                'brandList' => Inventory::GetBrandList($em, $companyId),
  895. //                'warehouse_action_list' => Inventory::warehouse_action_list($em,$this->getLoggedUserCompanyId($request),'object'),
  896. //                'warehouseList' => Inventory::WarehouseList($em),
  897.                 )
  898.             );
  900.         }
  903.         return $this->render('@System/pages/settings/my_pending_list.html.twig',
  904.             array(
  905.                 'page_title' => 'View',
  906.                 'override_approval_list' => $override_approval_list,
  907.                 'pending_approval_list' => $pending_approval_list
  908.             )
  909.         );
  910.     }
  912.     public function getApprovalLogAction(Request $request)
  913.     {
  915.         $em = $this->getDoctrine()->getManager();
  916.         $entityId = $request->query->get('entityId');
  917.         $entity = $request->query->get('entity');
  918.             $doc = $em->getRepository('ApplicationBundle\\Entity\\' . GeneralConstant::$Entity_list[$entity])
  919.             ->findOneBy(
  920.                 array(
  922.                     GeneralConstant::$Entity_id_field_list[$entity] => $entityId,
  923.                 )
  924.             );
  925.         $log_data = [];
  926.         $data = [];
  927.         $pending_data = [];
  928.         $remaining_data = [];
  929.         $created_data = [];
  930.         $created_data['dt'] = [];
  931.         $edited_data = [];
  932.         $edited_data['dt'] = [];
  934.         if($doc) {
  935.             $set = $em->getRepository('ApplicationBundle\\Entity\\Approval')
  936.                 ->findBy(
  937.                     array(
  938.                         'entity' => $entity,
  939.                         'entityId' => $entityId,
  940.                     )
  941.                 );
  942.             $roleType = GeneralConstant::$approvalRole;
  943.             //        $approvalRoles=GeneralConstant::$approvalRoleForPrint;
  944.             //now add additional roles form dbase
  945.             $addRoles = $em->getRepository('ApplicationBundle\\Entity\\ApprovalRole')
  946.                 ->findBy(
  947.                     array( //                    'id' => $v->getSigId()
  948.                     )
  949.                 );
  950.             foreach ($addRoles as $addRole) {
  951.                 $roleType[$addRole->getIndexId()] = $addRole->getName();
  952.             }
  955.             if ($doc->getCreatedLoginId() && $doc->getCreatedLoginId() != 0 && $doc->getCreatedLoginId() != null) {
  956.                 $usrDT = Users::getUserInfoByLoginId($em, $doc->getCreatedLoginId());
  958.                 if (isset($usrDT['id'])) {
  959.                     $gg = Users::getUserInfoByUserId($em, $usrDT['id']);
  960.                     $gg['action'] = '';
  961.                     $gg['sequence'] = 0;
  962.                     $gg['actionId'] = 0;
  963.                     $gg['role'] = 1;
  964.                     $gg['roleName'] = GeneralConstant::$approvalRole[1];
  966.                     $gg['note'] = '';
  967.                     $gg['current'] = 0;
  968.                     $gg['loginIp'] = $usrDT['loginIp'];
  970.                     $gg['dateTs'] = 1 * $doc->getCreatedAt()->format('U');
  971.                     $data[] = $gg;
  972.                 }
  973.             }
  976.             if ($doc->getEditedLoginId() != null && $doc->getEditedLoginId() != 0) {
  977.                 $usrDT = Users::getUserInfoByLoginId($em, $doc->getEditedLoginId());
  978.                 if (isset($usrDT['id'])) {
  979.                     $gg = Users::getUserInfoByUserId($em, $usrDT['id']);
  980.                     $gg['action'] = '';
  981.                     $gg['sequence'] = 0;
  982.                     $gg['actionId'] = 0;
  983.                     $gg['role'] = 2;
  984.                     $gg['roleName'] = GeneralConstant::$approvalRole[2];
  986.                     $gg['note'] = '';
  987.                     $gg['current'] = 0;
  988. //                $gg['date'] = $doc->getUpdatedAt();
  989.                     $gg['loginIp'] = $usrDT['loginIp'];
  990.                     $gg['dateTs'] = 1 * $doc->getUpdatedAt()->format('U');
  991.                     $data[] = $gg;
  992.                 }
  993.             }
  994.             //        $remaining_data=[];
  995.             foreach ($roleType as $key => $value) {
  996.                 $log_data[$key] = array(
  997.                     'role_name' => $value,
  998.                     'dt' => []
  999.                 );
  1000.             }
  1002.             foreach ($set as $entry) {
  1004.                 if ($entry->getAction() == 3) {
  1005.                     foreach (json_decode($entry->getUserIds(), true) as $item)
  1006.                         if ($item != null) {
  1007.                             $gg = Users::getUserInfoByUserId($em, $item);
  1008.                             $gg['action'] = GeneralConstant::$approvalAction[$entry->getAction()];
  1009.                             $gg['sequence'] = 1 * $entry->getSequence();
  1010.                             $gg['actionId'] = 1 * $entry->getAction();
  1011.                             $gg['role'] = 1 * $entry->getRoleType();
  1012.                             $gg['roleName'] = GeneralConstant::$approvalRole[$entry->getRoleType()];
  1014.                             $gg['note'] = $entry->getNote();
  1015.                             $gg['current'] = $entry->getCurrent() == GeneralConstant::CURRENTLY_PENDING_APPROVAL ? 1 : 0;
  1016.                             $gg['dateTs'] = 1 * $doc->getUpdatedAt()->format('U');
  1017.                             $data[] = $gg;
  1019.                         }
  1021.                 } else {
  1022.                     $usrDT = Users::getUserInfoByLoginId($em, $doc->getCreatedLoginId());
  1024.                     if (isset($usrDT['id'])) {
  1025.                         $gg = Users::getUserInfoByUserId($em, $usrDT['id']);
  1026.                         $gg['action'] = GeneralConstant::$approvalAction[$entry->getAction()];
  1027.                         $gg['sequence'] = 1 * $entry->getSequence();
  1028.                         $gg['actionId'] = 1 * $entry->getAction();
  1029.                         $gg['role'] = 1 * $entry->getRoleType();
  1030.                         $gg['roleName'] = GeneralConstant::$approvalRole[$entry->getRoleType()];
  1032.                         $gg['note'] = $entry->getNote();
  1033.                         $gg['current'] = $entry->getCurrent() == GeneralConstant::CURRENTLY_PENDING_APPROVAL ? 1 : 0;
  1034.                         $gg['dateTs'] = 1 * $usrDT['logTime']->format('U');
  1035.                         $gg['loginIp'] = $usrDT['loginIp'];
  1036.                         $data[] = $gg;
  1039.                     }
  1040.                 }
  1042.             }
  1043.         }
  1045.         return new JsonResponse([
  1046.             "message" => !empty($data) ? "success" : "false",
  1047.             "data" => empty($data) ? "No data found using the entity" : $data
  1048.         ]);
  1052.     }
  1054.     public function getDocumentDataAction(Request $request)
  1055.     {
  1056.         $entityListDetails = GeneralConstant::$Entity_list_details;
  1057.         $entityListForApp = [];
  1059.         foreach ($entityListDetails as $id => $entity) {
  1060.             $entityListForApp[] = [
  1061.                 'id' => $id,
  1062.                 'entity_alias' => $entity['entity_alias'],
  1063.                 'imageUrl' => isset($entity['image_url']) ? $entity['image_url'] : 'app_asset/default_document.svg'
  1064.             ];
  1065.         }
  1066.         return new JsonResponse($entityListForApp);
  1067.     }
  1069.     public function documentSummaryAction(Request $request)
  1070.     {
  1071.         // No document context here, so return an empty key-facts list rather than the
  1072.         // Lorem-Ipsum placeholder (mobile shows a graceful fallback). Real per-document
  1073.         // rows come from pending_approval_list[i].summary. See APPROVAL_SUMMARY_FIX.md.
  1074.         return new JsonResponse([]);
  1075.     }
  1077. }