lib/devise/strategies/database_authenticatable.rb in devise-4.4.3 vs lib/devise/strategies/database_authenticatable.rb in devise-4.5.0

@@ -15,10 +15,12 @@
           resource.after_database_authentication
           success!(resource)
         end
 
         mapping.to.new.password = password if !hashed && Devise.paranoid
-        fail(:not_found_in_database) unless resource
+        unless resource
+          Devise.paranoid ? fail(:invalid) : fail(:not_found_in_database)
+        end
       end
     end
   end
 end