authProcRoutes.post('/userinvite', async (req, res, next) => {

    let conn;

    let emailSent = false;

    console.log(req.body);

    try {

        // validate input 

        const inputValidated = await validateUserInviteInput(req.body); 

        if (typeof inputValidated === 'string' || inputValidated instanceof String) {

            return res.status(400).send((inputValidated)); 

        }

        // process security settings

        const exprDateTimeUTC = new Date(getDatePlus(48).toUTCString());

        const userPWResetExpr = exprDateTimeUTC.toISOString().replace('Z','').replace('T', ' ');

        const userPWResetToken = await hashPassword(userPWResetExpr + req.body.userEmail);

        // connect to database

        const mdbpool = getPool();

        conn = await mdbpool.getConnection();

        console.log("connected ! connection id is " + conn.threadId);

        const dbResponse = await conn.query(

            'CALL auth_user_P__userinvite_sp(?,?,?,?,?,?,?,?,?,@NewRcrdID); SELECT @NewRcrdID;', [

                req.body.customerID,  

                req.body.userEmail, 

                req.body.userFirstName, 

                req.body.userLastName, 

                userPWResetToken,

                userPWResetExpr,

                req.body.userType,

                req.body.userSummary,

                req.body.userRequesterID 

            ]

        );

        console.log(dbResponse);

        const dbrSQL1 = dbResponse[0];

        const dbrOkPacket = dbResponse[1];

        const dbrSQL2 = dbResponse[2];

        const resObject = dbrSQL2[0]; 

        console.log(dbrSQL1);

        console.log(dbrOkPacket);

        console.log(dbrSQL2);

        console.log(resObject['@NewRcrdID']);

        if (dbResponse[1].affectedRows > 1) {

            // emailSent = code to send email 

        };  

        if (conn) conn.end();

        console.log('conn.end()');

        res.send('Invite sent to ' + req.body.userFirstName);

    } catch (err) {

        if (conn) conn.end();

        console.error("Catch Block: ", err);

        res.status(500).send('Error: ' + err.text);

    }

});