Password gets updated but current password is still invalid.

[meta-akshat-mathur]

I am using devise (4.2.0) and devise_token_auth(0.1.40)
When I change password for user, I have send (current_password,password,password_confirmation) ,
If the current password is invalid it returns an error but at the same time it updates the password for the user. Please check

[sivagollapalli]

@meta-akshat-mathur Could you provide a sample program to reproduce this issue?

[zachfeldman]

Closing due to lack of more information