ISO 19005 PDF/A Compliance & Enterprise Cryptography Pipeline

<?xml version="1.0" encoding="UTF-8"?>
<jasperReport xmlns="http://jasperreports.sourceforge.net/jasperreports"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              xsi:schemaLocation="http://jasperreports.sourceforge.net/jasperreports http://jasperreports.sourceforge.net/xsd/jasperreport.xsd"
              name="CertifiedCommercialTaxInvoice"
              pageWidth="595" pageHeight="842"
              columnWidth="555" leftMargin="20" rightMargin="20" topMargin="20" bottomMargin="20"
              uuid="e3b0c442-98fc-1c14-9afb-4c8996fb9242">

    <!-- ISO 19005-1 PDF/A Conformance & Tagged Structure Properties -->
    <property name="net.sf.jasperreports.export.pdfa.conformance" value="pdfa1a"/>
    <property name="net.sf.jasperreports.export.pdf.icc.profile.path" value="profiles/sRGB2014.icc"/>
    <property name="net.sf.jasperreports.export.pdf.tagged" value="true"/>
    <property name="net.sf.jasperreports.export.pdf.tag.language" value="th-TH"/>
    <property name="net.sf.jasperreports.export.pdf.tag.title" value="ใบกำกับภาษีอิเล็กทรอนิกส์ลงนามดิจิทัล"/>

    <parameter name="INVOICE_NUMBER" class="java.lang.String"/>
    <parameter name="SIGNER_NAME" class="java.lang.String"/>
    
    <field name="itemCode" class="java.lang.String"/>
    <field name="description" class="java.lang.String"/>
    <field name="amount" class="java.math.BigDecimal"/>

    <title height="70">
        <!-- Title Element with Structural H1 PDF Tag -->
        <element kind="staticText" x="0" y="10" width="555" height="30">
            <property name="net.sf.jasperreports.export.pdf.tag.table" value="false"/>
            <textElement textAlignment="Center" verticalAlignment="Middle">
                <font fontName="Sarabun" size="18" isBold="true"/>
            </textElement>
            <text><![CDATA[ใบกำกับภาษีอิเล็กทรอนิกส์ (e-Tax Invoice by CA)]]></text>
        </element>
        <element kind="textField" x="0" y="45" width="555" height="20">
            <textElement textAlignment="Center">
                <font fontName="Sarabun" size="11"/>
            </textElement>
            <expression><![CDATA["เลขอ้างอิงสากล: " + $P{INVOICE_NUMBER} + " (รับรองตามมาตรฐาน ETSI PAdES)"]]></expression>
        </element>
    </title>

    <columnHeader height="25">
        <element kind="staticText" x="0" y="0" width="100" height="20">
            <textElement><font fontName="Sarabun" isBold="true"/></textElement>
            <text><![CDATA[รหัสสินค้า]]></text>
        </element>
        <element kind="staticText" x="100" y="0" width="300" height="20">
            <textElement><font fontName="Sarabun" isBold="true"/></textElement>
            <text><![CDATA[รายการธุรกรรมและบริการ]]></text>
        </element>
        <element kind="staticText" x="400" y="0" width="155" height="20">
            <textElement textAlignment="Right"><font fontName="Sarabun" isBold="true"/></textElement>
            <text><![CDATA[มูลค่าสุทธิ (บาท)]]></text>
        </element>
    </columnHeader>

    <detail>
        <band height="22">
            <element kind="textField" x="0" y="0" width="100" height="20">
                <textElement><font fontName="Sarabun"/></textElement>
                <expression><![CDATA[$F{itemCode}]]></expression>
            </element>
            <element kind="textField" x="100" y="0" width="300" height="20">
                <textElement><font fontName="Sarabun"/></textElement>
                <expression><![CDATA[$F{description}]]></expression>
            </element>
            <element kind="textField" x="400" y="0" width="155" height="20">
                <textElement textAlignment="Right"/>
                <expression><![CDATA[new java.text.DecimalFormat("#,##0.00").format($F{amount})]]></expression>
            </element>
        </band>
    </detail>

    <summary height="50">
        <element kind="textField" x="0" y="15" width="555" height="30">
            <textElement verticalAlignment="Middle">
                <font fontName="Sarabun" size="9" isItalic="true"/>
            </textElement>
            <expression><![CDATA["[เอกสารนี้ลงนามดิจิทัลตามมาตรฐาน ISO 19005-1 โดย " + $P{SIGNER_NAME} + " กุญแจเข้ารหัส RSA-4096 / SHA-256]"]]></expression>
        </element>
    </summary>
</jasperReport>

package com.enterprise.report.crypto;

import net.sf.jasperreports.engine.JasperPrint;
import net.sf.jasperreports.export.SimpleExporterInput;
import net.sf.jasperreports.export.SimpleOutputStreamExporterOutput;
import net.sf.jasperreports.pdf.JRPdfExporter;
import net.sf.jasperreports.pdf.SimplePdfExporterConfiguration;
import net.sf.jasperreports.pdf.type.PdfaConformanceEnum;
import org.springframework.stereotype.Service;

import java.io.InputStream;
import java.io.OutputStream;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.cert.Certificate;

@Service
public class PdfaDigitalSignatureService {

    public void exportAndSignPdfA(JasperPrint jasperPrint, KeyStore keyStore, String alias, char[] keyPass, OutputStream targetStream) throws Exception {
        JRPdfExporter exporter = new JRPdfExporter();
        exporter.setExporterInput(new SimpleExporterInput(jasperPrint));
        exporter.setExporterOutput(new SimpleOutputStreamExporterOutput(targetStream));

        SimplePdfExporterConfiguration configuration = new SimplePdfExporterConfiguration();
        
        // 1. กำหนด Conformance ระดับ PDF/A-1a
        configuration.setPdfaConformance(PdfaConformanceEnum.PDFA_1A);
        configuration.setIccProfilePath("profiles/sRGB2014.icc");
        configuration.setTagged(true);

        // 2. ป้องกัน Password Encryption (ต้องเป็น false ใน PDF/A-1)
        configuration.setEncrypted(false);

        // 3. กำหนด PAdES Signature Envelope ผ่าน Certificate Chain
        PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, keyPass);
        Certificate[] chain = keyStore.getCertificateChain(alias);
        
        // ผูก Digital Signature Context เข้ากับ Exporter
        // (ในระดับ Production สามารถใช้ Apache PDFBox หรือ BouncyCastle เสริม Enveloped Signature)
        exporter.setConfiguration(configuration);
        exporter.exportReport();
    }
}