Hi fellas! My house have been working good for last month. Our one page app evolved from the stage where Tapestry generated the markup, to the stage where Tapestry only loads the JavaScript, and emits REST like links. The entire client side of an app is written in Coffee with heavy RequireJS usage, thanks to Howard Lewis Ship for the promotion of the library. We don't reload pages anymore, we just load and activate additional module through RequireJS, what feels insanely great.
But we still have a normal login page, with a login form. And I want to get rid of it. I want to give the user the seamless experience, with the only one page load. I would like to load the script that will transform the page, right after the user have submitted the login form. So what are the ways to do so? I thought that I should handle something "LoginFromLoginForm" event, and send the script if login is ok. How should I align and configure the script, what to read from the docs? How could I do that (login request) from plain JS (on the client)? Am I right, that I will only need to send the data to the special link? If so -- how could I secure this action? Today we are using jQuery ajax library. Is there a built-in features to secure the other connections to the server? Today we are using the http connection, so I guess all we need is to use https, and everything will be fine. Is that a normal protection? I also would like to seat on the WebSocket pipe later. Oracle man said something like "Yo, you should seat on the WebSockets, because they are official, unlike Comet, and they use freakin little amount of headers for the requests." Anyway I need the right server to client pipe to send events (at least).