On signup - creating a duplicate account with the same credentials on another site

Question

I am using Devise to handle registration process.

How can I create a duplicate account via ajax on another site using the same credentials?

I can overwrite Registration controller, but don't know how to get unencrypted password.

Answer 1

You need to override the Devise Registration Controller.

On the create method, get the user input, send it to your other website, then call super to handle registration by devise.

You certainly want to send datas to other website through an API, because of the CSRF protection.

Answer 2

You can't get the unencrypted password.

Devise uses Bcrypt, which a one way encryption algorithm. The only way to get create an exact duplicate is top copy the encrypted password directly, rather than using the unencrypted version.

However I'd strongly recommend against this, what are you trying to achieve? Is there a better way to handle this problem - OAuth?