diff --git a/internal/api/routes/web.go b/internal/api/routes/web.go
new file mode 100644
index 0000000..f35c9d8
--- /dev/null
+++ b/internal/api/routes/web.go
@@ -0,0 +1,39 @@
+package routes
+
+import (
+ "net/http"
+
+ "github.com/go-chi/chi/v5"
+
+ "Coves/internal/atproto/oauth"
+ "Coves/internal/core/users"
+ "Coves/internal/web"
+)
+
+// RegisterWebRoutes registers all web page routes for the Coves frontend.
+// This includes the landing page, account deletion flow, and static assets.
+func RegisterWebRoutes(r chi.Router, oauthClient *oauth.OAuthClient, userService users.UserService) {
+ // Initialize templates
+ templates, err := web.NewTemplates()
+ if err != nil {
+ panic("failed to load web templates: " + err.Error())
+ }
+
+ // Create handlers
+ handlers := web.NewHandlers(templates, oauthClient, userService)
+
+ // Landing page
+ r.Get("/", handlers.LandingHandler)
+
+ // Account deletion flow
+ r.Get("/delete-account", handlers.DeleteAccountPageHandler)
+ r.Post("/delete-account", handlers.DeleteAccountSubmitHandler)
+ r.Get("/delete-account/success", handlers.DeleteAccountSuccessHandler)
+
+ // Static files (images, etc.)
+ r.Get("/static/*", func(w http.ResponseWriter, r *http.Request) {
+ // Serve from project's static directory
+ fs := http.StripPrefix("/static/", http.FileServer(http.Dir("static")))
+ fs.ServeHTTP(w, r)
+ })
+}
diff --git a/internal/web/handlers.go b/internal/web/handlers.go
new file mode 100644
index 0000000..acff087
--- /dev/null
+++ b/internal/web/handlers.go
@@ -0,0 +1,175 @@
+package web
+
+import (
+ "log"
+ "log/slog"
+ "net/http"
+
+ "Coves/internal/atproto/oauth"
+ "Coves/internal/core/users"
+)
+
+// Handlers provides HTTP handlers for the Coves web interface.
+// This includes the landing page, static files, and account management.
+type Handlers struct {
+ templates *Templates
+ oauthClient *oauth.OAuthClient
+ userService users.UserService
+}
+
+// NewHandlers creates a new Handlers instance with the provided dependencies.
+func NewHandlers(templates *Templates, oauthClient *oauth.OAuthClient, userService users.UserService) *Handlers {
+ return &Handlers{
+ templates: templates,
+ oauthClient: oauthClient,
+ userService: userService,
+ }
+}
+
+// LandingPageData holds data for the landing page template.
+type LandingPageData struct {
+ // Title is the page title
+ Title string
+ // Description is the meta description for SEO
+ Description string
+ // AppStoreURL is the URL for the iOS App Store listing
+ AppStoreURL string
+ // PlayStoreURL is the URL for the Google Play Store listing
+ PlayStoreURL string
+}
+
+// LandingHandler handles GET / requests and renders the landing page.
+func (h *Handlers) LandingHandler(w http.ResponseWriter, r *http.Request) {
+ // Only handle exact root path - let other routes handle their own paths
+ if r.URL.Path != "/" {
+ http.NotFound(w, r)
+ return
+ }
+
+ data := LandingPageData{
+ Title: "Coves - Community-Driven Forums on atProto",
+ Description: "Coves is a forum-like social app built on the AT Protocol. Join communities, share content, and own your data.",
+ // App store URLs - update these when apps are published
+ AppStoreURL: "https://apps.apple.com/app/coves",
+ PlayStoreURL: "https://play.google.com/store/apps/details?id=social.coves.app",
+ }
+
+ if err := h.templates.Render(w, "landing.html", data); err != nil {
+ log.Printf("Failed to render landing page: %v", err)
+ http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+ }
+}
+
+// DeleteAccountPageData contains the data for the delete account template
+type DeleteAccountPageData struct {
+ LoggedIn bool
+ Handle string
+ DID string
+}
+
+// DeleteAccountPageHandler renders the delete account page
+// GET /delete-account
+func (h *Handlers) DeleteAccountPageHandler(w http.ResponseWriter, r *http.Request) {
+ data := DeleteAccountPageData{
+ LoggedIn: false,
+ }
+
+ // Check for session cookie
+ cookie, err := r.Cookie("coves_session")
+ if err == nil && cookie.Value != "" {
+ // Try to unseal the session
+ sealed, err := h.oauthClient.UnsealSession(cookie.Value)
+ if err == nil && sealed != nil {
+ // Session is valid, get user info
+ user, err := h.userService.GetUserByDID(r.Context(), sealed.DID)
+ if err == nil && user != nil {
+ data.LoggedIn = true
+ data.Handle = user.Handle
+ data.DID = user.DID
+ } else {
+ slog.Warn("delete account: failed to get user by DID",
+ "did", sealed.DID, "error", err)
+ }
+ } else {
+ slog.Debug("delete account: invalid or expired session", "error", err)
+ }
+ }
+
+ if err := h.templates.Render(w, "delete_account.html", data); err != nil {
+ slog.Error("failed to render delete account template", "error", err)
+ http.Error(w, "Internal server error", http.StatusInternalServerError)
+ }
+}
+
+// DeleteAccountSubmitHandler processes the account deletion request
+// POST /delete-account
+func (h *Handlers) DeleteAccountSubmitHandler(w http.ResponseWriter, r *http.Request) {
+ ctx := r.Context()
+
+ // Verify session
+ cookie, err := r.Cookie("coves_session")
+ if err != nil || cookie.Value == "" {
+ slog.Warn("delete account submit: no session cookie")
+ http.Redirect(w, r, "/delete-account", http.StatusFound)
+ return
+ }
+
+ // Unseal the session
+ sealed, err := h.oauthClient.UnsealSession(cookie.Value)
+ if err != nil || sealed == nil {
+ slog.Warn("delete account submit: invalid session", "error", err)
+ h.clearSessionCookie(w)
+ http.Redirect(w, r, "/delete-account", http.StatusFound)
+ return
+ }
+
+ // Parse form to check confirmation checkbox
+ if err := r.ParseForm(); err != nil {
+ slog.Error("delete account submit: failed to parse form", "error", err)
+ http.Error(w, "Bad request", http.StatusBadRequest)
+ return
+ }
+
+ // Verify confirmation checkbox was checked
+ if r.FormValue("confirm") != "true" {
+ slog.Warn("delete account submit: confirmation not checked", "did", sealed.DID)
+ http.Redirect(w, r, "/delete-account", http.StatusFound)
+ return
+ }
+
+ // Delete the user's account
+ err = h.userService.DeleteAccount(ctx, sealed.DID)
+ if err != nil {
+ slog.Error("delete account submit: failed to delete account",
+ "did", sealed.DID, "error", err)
+ http.Error(w, "Failed to delete account", http.StatusInternalServerError)
+ return
+ }
+
+ slog.Info("account deleted successfully via web", "did", sealed.DID)
+
+ // Clear the session cookie
+ h.clearSessionCookie(w)
+
+ // Redirect to success page
+ http.Redirect(w, r, "/delete-account/success", http.StatusFound)
+}
+
+// DeleteAccountSuccessHandler renders the deletion success page
+// GET /delete-account/success
+func (h *Handlers) DeleteAccountSuccessHandler(w http.ResponseWriter, r *http.Request) {
+ if err := h.templates.Render(w, "delete_success.html", nil); err != nil {
+ slog.Error("failed to render delete success template", "error", err)
+ http.Error(w, "Internal server error", http.StatusInternalServerError)
+ }
+}
+
+// clearSessionCookie clears the session cookie
+func (h *Handlers) clearSessionCookie(w http.ResponseWriter) {
+ http.SetCookie(w, &http.Cookie{
+ Name: "coves_session",
+ Value: "",
+ Path: "/",
+ MaxAge: -1,
+ })
+}
diff --git a/internal/web/templates.go b/internal/web/templates.go
new file mode 100644
index 0000000..f41a4b4
--- /dev/null
+++ b/internal/web/templates.go
@@ -0,0 +1,58 @@
+// Package web provides HTTP handlers and templates for the Coves web interface.
+// This includes the landing page and static file serving for the coves.social website.
+package web
+
+import (
+ "embed"
+ "fmt"
+ "html/template"
+ "net/http"
+ "path/filepath"
+)
+
+//go:embed templates/*.html
+var templatesFS embed.FS
+
+// Templates holds the parsed HTML templates for the web interface.
+type Templates struct {
+ templates *template.Template
+}
+
+// NewTemplates creates a new Templates instance by parsing all embedded templates.
+func NewTemplates() (*Templates, error) {
+ tmpl, err := template.ParseFS(templatesFS, "templates/*.html")
+ if err != nil {
+ return nil, fmt.Errorf("failed to parse templates: %w", err)
+ }
+ return &Templates{templates: tmpl}, nil
+}
+
+// Render renders a named template with the provided data to the response writer.
+// Returns an error if the template doesn't exist or rendering fails.
+func (t *Templates) Render(w http.ResponseWriter, name string, data interface{}) error {
+ // Set content type before writing
+ w.Header().Set("Content-Type", "text/html; charset=utf-8")
+
+ // Check if template exists
+ tmpl := t.templates.Lookup(name)
+ if tmpl == nil {
+ return fmt.Errorf("template %q not found", name)
+ }
+
+ // Execute template
+ if err := tmpl.Execute(w, data); err != nil {
+ return fmt.Errorf("failed to execute template %q: %w", name, err)
+ }
+
+ return nil
+}
+
+// ProjectStaticFileServer returns an http.Handler that serves static files from the project root.
+// This is used for files that live outside the web package (e.g., /static/images/).
+func ProjectStaticFileServer(staticDir string) http.Handler {
+ absPath, err := filepath.Abs(staticDir)
+ if err != nil {
+ panic(fmt.Sprintf("failed to get absolute path for static directory: %v", err))
+ }
+ return http.StripPrefix("/static/", http.FileServer(http.Dir(absPath)))
+}
diff --git a/internal/web/templates/delete_account.html b/internal/web/templates/delete_account.html
new file mode 100644
index 0000000..1e9f2dd
--- /dev/null
+++ b/internal/web/templates/delete_account.html
@@ -0,0 +1,335 @@
+
+
+
+
+
+ Delete Your Account - Coves
+
+
+
+
+
+
+
Delete Your Account
+
+ {{if .LoggedIn}}
+
+
You are signed in as:
+
@{{.Handle}}
+
+
+
This will permanently delete:
+
+
All your posts on Coves
+
All your comments
+
All your votes
+
Your community subscriptions and memberships
+
Your profile data on Coves
+
+
+
+
+
Your atProto identity (DID and handle) will be preserved. You can still use your Bluesky account and other atProto apps. Only your Coves-specific data will be removed.
+
+
+
+
+
+
+ {{else}}
+
+
To delete your Coves account, you'll need to sign in first to verify your identity.
+
+
+
When you delete your account:
+
+
All your Coves data will be permanently removed (posts, comments, votes, subscriptions)
+
Your atProto identity (DID and handle) will be preserved
+
You can still use your Bluesky account and other atProto apps
+
+
+
+
+
+
+
+
+ @
+
+
+
Please enter your handle to continue
+
+
+
+
+
+ You'll be redirected to your atproto provider to authorize this action.
+
Your atProto identity has been preserved. You can continue using your Bluesky account and other atProto applications. If you ever want to return to Coves, you can create a new account using the same identity.
+ Join topic-based communities, share what you love, and own your data.
+ Built on the AT Protocol—the same foundation as Bluesky—Coves brings forums to the decentralized web.
+
+ 
+