Encrypt, redact, sign and process PDFs

use pdfluent::{PdfDocument, EncryptOptions, Permissions};

fn main() -> pdfluent::Result<()> {
    let mut doc = PdfDocument::open("contract.pdf")?;

    let opts = EncryptOptions::aes256()
        .with_user_password("view-only")
        .with_owner_password("owner-secret-42")
        .with_permissions(Permissions::print_only());

    doc.encrypt(opts)?;
    doc.save("contract-encrypted.pdf")?;

    println!("Document encrypted with AES-256");
    Ok(())
}

use pdfluent::{PdfDocument, Pkcs12Signer, SignOptions};

fn main() -> pdfluent::Result<()> {
    let mut doc = PdfDocument::open("contract.pdf")?;

    let signer = Pkcs12Signer::from_pfx_file("signing.p12", "cert-password")?;
    let opts = SignOptions::new()
        .reason("Approved")
        .location("Amsterdam, NL")
        .contact_info("[email protected]");

    doc.sign(&signer, opts)?;
    doc.save("contract-signed.pdf")?;

    let report = doc.verify_signatures()?;
    println!("All signatures valid: {}", report.all_valid());
    Ok(())
}

use pdfluent::PdfDocument;

// The Result type makes error handling explicit — no segfaults possible.
// Buffer overflows and use-after-free bugs are eliminated by the Rust compiler.
fn process_pdf(path: &str) -> anyhow::Result<()> {
    // open() returns Result<Document, Error> — never a null pointer.
    let doc = PdfDocument::open(path)?;

    let page_count = doc.page_count();
    let title = doc.metadata().title().unwrap_or("(no title)");

    println!("Opened: {} ({} pages)", title, page_count);

    // doc is dropped here — memory is freed deterministically.
    // No garbage collector, no memory leak, no use-after-free.
    Ok(())
}