{ok, Salt} = bcrypt:gen_salt(),
  InitialState = #{salt => Salt},

  InitialState = #{},

      {'_', [{"/", hash_handler, InitialState}]}
  ]),

      {'_', [
        {"/hash", hash_handler, InitialState},
        {"/fanout", fanout_handler, InitialState}
      ]}]),

-export([content_types_provided/2]).

-export([run/2]).

-export([from_json/2]).
-export([to_json/2]).

  {[{{<<"application">>, <<"x-www-form-urlencoded">>, '*'}, run}],

  {[
    {<<"application/json">>, from_json}
  ],

content_types_provided(Req, State) ->
  % Required everytime the client request contains an
  % "Accept" header. Even if the method is never GET
  % and this callback is never called.
  {[
    {<<"application/json">>, to_json}
  ], Req, State}.

run(Req, #{salt := Salt} = State) ->
  {ok, [{<<"data">>, Data}], Req1} = cowboy_req:read_urlencoded_body(Req),
  {ok, Hash} = bcrypt:hashpw(Data, Salt),
  Req2 = cowboy_req:set_resp_body(Hash, Req1),

from_json(Req, State) ->
  {ok, Body, Req1} = cowboy_req:read_body(Req),
  {ok, Data} = thoas:decode(Body),
  % Use same defaults than bcrypt
  Rounds = maps:get(rounds, Data, 12),
  {ok, Salt} = bcrypt:gen_salt(Rounds),
  % Hash the whole Body to ensure that players don't overwrite
  % settings in the requests.
  {ok, Hash} = bcrypt:hashpw(Body, Salt),
  Res = thoas:encode(#{<<"digest">> => list_to_binary(Hash)}),
  Req2 = cowboy_req:set_resp_body(Res, Req1),

to_json(Req, State) ->
  % Not used but required by content_types_provided/2
  {true, Req, State}.

	{modules, ['hash_handler','survival_app','survival_sup']},

	{modules, ['fanout_handler','hash_handler','survival_app','survival_sup']},

	{applications, [kernel,stdlib,cowboy,bcrypt]},

	{applications, [kernel,stdlib,inets,cowboy,bcrypt,thoas,sync]},

DEPS = cowboy bcrypt

DEPS = cowboy bcrypt thoas sync

dep_thoas = git https://github.com/lpil/thoas v1.0.0

LOCAL_DEPS = inets