Story 4: Student Document Management

Overview

Field	Value
Story ID	NGE-13-4
Story Points	13
Sprint	Sprint 8

Technical Implementation

Document Upload Service

@Injectable()
export class DocumentService {
  async uploadDocument(
    studentId: string,
    file: Express.Multer.File,
    metadata: UploadDocumentDto,
  ) {
    // Validate file
    this.validateFile(file, metadata.documentType);

    // Upload to S3 with encryption
    const s3Key = `students/${studentId}/${metadata.documentType}/${file.originalname}`;
    await this.s3.upload({
      key: s3Key,
      body: file.buffer,
      serverSideEncryption: 'aws:kms',
    });

    // Save metadata
    return this.prisma.studentDocument.create({
      data: { studentId, documentType: metadata.documentType, s3Key }
    });
  }

  async getSignedUrl(documentId: string) {
    // Audit access (DPDPA compliance)
    await this.auditService.log({ action: 'VIEW_DOCUMENT', documentId });
    
    const doc = await this.prisma.studentDocument.findUnique({ where: { id: documentId } });
    return this.s3.getSignedUrl(doc.s3Key, 300); // 5 min expiry
  }
}

Document Types

Type	Max Size	Formats
PHOTO	2MB	JPEG, PNG
BIRTH_CERTIFICATE	5MB	PDF, JPEG
AADHAAR	5MB	PDF, JPEG
TC	5MB	PDF
MARKSHEET	10MB	PDF