What it means
wrong current password (never a 401; the console signs out on a 401).
How to handle it
Enter the current password again; keep the console session because this refusal is not an authentication failure.
Wire contract
| Code | password_incorrect |
|---|---|
| Class | permission |
| HTTP status | 403 |
| Meta keys | None |
| Raised | Yes |
The response uses the standard {"error": {…}} envelope. Branch on error.code, not the human-readable message. Preserve request_id when reporting a failure.