app.post('/after-payment-form', csrfProtection, async (req, res) => {
  console.log('Request Headers:', req.headers); 
  console.log('Request Body:', req.body); 
  console.log('CSRF Token Received:', req.body._csrf);
  const { error, value } = formSchema.validate(req.body);
  if (error) {
    console.error('Validation Error:', error.details);
    return res.status(400).send(error.details.map(detail => detail.message).join(", "));
  }
  if (value.links && !isSafeUrl(value.links)) {
    return res.status(400).send('Invalid URL in links field');
  }
  const emailData = {
    from: 'no-reply@company.com',
    to: value.email,
    subject: 'Payment Confirmation',
    html: '<p>Hey! Payment has been received.</p>'
  };
  const OfficialDataSender = {
    from: 'no-reply@companyadmin.com',
    to: "myemail.com",
    subject: 'New Data.',
    html: '<p>New form data:</p><pre>' + JSON.stringify(value, null, 2) + '</pre>'
  };
  try {
    await sendEmail(emailData);
    await sendEmail(OfficialDataSender);
    res.status(200).json({ message: 'Form and email processed successfully', formData: value });
  } catch (error) {
    console.error('Failed to send email:', error);
    res.status(500).send('Failed to send email');
  }
});

module.exports = app;