Merge remote-tracking branch 'origin/master'

svc/routes/statement_header_pdf.go

@@ -9,6 +9,7 @@ import (
 	"fmt"
 	"log"
 	"net/http"
+	"runtime/debug"
 	"sort"
 	"strings"
 	"time"
@@ -262,6 +263,14 @@ func hDrawMainDataRow(pdf *gofpdf.Fpdf, row []string, widths []float64, rowH flo
 
 func ExportStatementHeaderReportPDFHandler(mssql *sql.DB) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
+		defer func() {
+			if rec := recover(); rec != nil {
+				log.Printf("❌ PANIC ExportStatementHeaderReportPDFHandler: %v", rec)
+				debug.PrintStack()
+				http.Error(w, fmt.Sprintf("header PDF panic: %v", rec), http.StatusInternalServerError)
+			}
+		}()
+
 		claims, ok := auth.GetClaimsFromContext(r.Context())
 		if !ok || claims == nil {
 			http.Error(w, "unauthorized", http.StatusUnauthorized)
@@ -373,6 +382,11 @@ func ExportStatementHeaderReportPDFHandler(mssql *sql.DB) http.HandlerFunc {
 			pdf.Ln(1)
 		}
 
+		if err := pdf.Error(); err != nil {
+			http.Error(w, "PDF render hatası: "+err.Error(), http.StatusInternalServerError)
+			return
+		}
+
 		var buf bytes.Buffer
 		if err := pdf.Output(&buf); err != nil {
 			http.Error(w, "PDF oluşturulamadı: "+err.Error(), http.StatusInternalServerError)