Change old user password

I have a post api to change user data, the password change function is now implemented as follows: Input 'confirmOldPassword' should be equal to the old password,
if this is true input 'InputNewPassword' should replace the old password value. I don't know how to implement security for this logic, maybe it can be implemented differently, I will be glad for any recommendations