Contract PDFs in Spring Boot

Why contracts become PDFs

A contract has to be fixed at signature. Both parties need to be certain they are looking at identical words, which a rendered page cannot guarantee. That is the difference between a document and a view of a database, and it is why legal and sales operations keep asking for this.

What a contract has to carry

Before any of the code below matters, the template has to produce a document that is actually a contract. These are the fields that make it one, and the ones a reader or an auditor will look for first.

• the parties, by legal entity name and registered number
• the effective date and the term
• numbered clauses with stable numbering, since amendments reference them
• the commercial schedule, usually as an annexe rather than in the body
• signature blocks with name, title and date for each party

Turning your Thymeleaf template into a document

You already have the markup. TemplateEngine.process("invoice", context) gives you it as a string, which is the only input the render needs. Thymeleaf's @{...} link syntax resolves against the servlet context path. In a rendered document that context does not exist, so build absolute URLs or inline the CSS.

The Spring Boot implementation

java.net.http.HttpClient ships with the runtime, so this adds no dependency. The render happens in a controller returning StreamingResponseBody, and you return ResponseEntity<StreamingResponseBody>.

// ContractPdfController.java
package com.example.contracts;

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.time.Duration;

@RestController
public class ContractPdfController {

  private final HttpClient http = HttpClient.newHttpClient();
  private final TemplateEngine templates;

  @Value("${pdfpipe.key}")
  private String apiKey;

  @GetMapping(value = "/contracts/{id}.pdf", produces = MediaType.APPLICATION_PDF_VALUE)
  public ResponseEntity<StreamingResponseBody> pdf(@PathVariable String id) throws Exception {
    Context context = new Context();
    context.setVariable("contract", contractService.find(id));
    String html = templates.process("contract", context);

    String body = new ObjectMapper().writeValueAsString(Map.of(
        "html", html,
        "options", Map.of("format", "A4", "printBackground", true)));

    HttpRequest request = HttpRequest.newBuilder(URI.create("https://api.pdfpipe.xyz/v1/pdf"))
        .header("Authorization", "Bearer " + apiKey)
        .header("Content-Type", "application/json")
        .timeout(Duration.ofSeconds(60))
        .POST(HttpRequest.BodyPublishers.ofString(body))
        .build();

    // ofInputStream, not ofByteArray. A long contract on the heap is how a
    // container sized for JSON payloads meets the garbage collector.
    HttpResponse<InputStream> upstream =
        http.send(request, HttpResponse.BodyHandlers.ofInputStream());

    return ResponseEntity.ok()
        .header("Content-Disposition", "attachment; filename=\"contract-" + id + ".pdf\"")
        .body(out -> upstream.body().transferTo(out));
  }
}

The CSS that makes a contract page correctly

The layout problem specific to this document is that numbered clauses with cross-references, where a page break in the wrong place separates a clause from the term it defines. These rules handle it.

/* A clause must not be separated from the term it defines, and a
   signature block alone on a final page invites a dispute. */
.clause     { break-inside: avoid; }
.signatures { break-inside: avoid; break-before: avoid; }

p { orphans: 3; widows: 3; }

@page { size: A4; margin: 25mm 20mm; }

What goes wrong in Spring Boot

RestTemplate returning byte[] materialises the whole document on the heap, and a servlet container sized for JSON will meet the garbage collector after a handful of concurrent report renders. Use the reactive client or the JDK client with ofInputStream.

What people try first

Most Spring Boot projects reach for Flying Saucer, which renders XHTML strictly and rejects markup a browser would accept, or iText, whose AGPL licence makes commercial use a paid decision. That works until it is running on more than one machine, at which point the browser becomes the thing you operate rather than the thing you use.

Where the contract lives afterwards

Rendering is the short part. A contract is retained for the term plus the limitation period, which typically means well over a decade. Immutability matters more here than anywhere else on this list: both parties must be able to prove the words have not moved.

Getting the document right

• Check the parties and the effective date, which is what every later dispute turns on.
• Generation is triggered by agreement being reached, often with a signature workflow following, so size the timeout for that path rather than for a health check.
• These are produced one at a time by a person who is waiting, so latency is felt directly.
• Backgrounds are painted by default here, so a design that uses colour needs nothing set. Only an explicit print_background of false turns them off.

Frequently asked

Related

Other Spring Boot documents, and the same contract in other stacks.