code: def change_password():
      
  
      form_class = _security.change_password_form
  
      if request.is_json:
          form = form_class(MultiDict(request.get_json()))
      else:
          form = form_class()
  
      if form.validate_on_submit():
          after_this_request(_commit)
          change_user_password(current_user._get_current_object(),
                               form.new_password.data)
          if not request.is_json:
              do_flash(*get_message('PASSWORD_CHANGE'))
              return redirect(get_url(_security.post_change_view) or
                              get_url(_security.post_login_view))
  
      if request.is_json:
          form.user = current_user
          return _render_json(form)
  
      return _security.render_template(
          config_value('CHANGE_PASSWORD_TEMPLATE'),
          change_password_form=form,
          **_ctx('change_password')
      )
docs: View function which handles a change password request.