gistfile1.php

<?php
namespace My\App\Validation\Validator;

use TYPO3\Flow\Annotations as Flow;

/**
 * Checks if the specified password matches the current user's password
 *
 * @Flow\Scope("singleton")
 */
class CurrentPasswordValidator extends \TYPO3\Flow\Validation\Validator\AbstractValidator {

  /**
	 * @Flow\Inject
	 * @var \TYPO3\Flow\Security\Context
	 */
	protected $securityContext;

	/**
	 * @var \TYPO3\Flow\Security\Cryptography\HashService
	 * @Flow\Inject
	 */
	protected $hashService;

	/**
	 * @param mixed $value The value that should be validated
	 * @return void
	 */
	protected function isValid($value) {
		$account = $this->securityContext->getPartyByType('\My\App\Domain\Model\User\User');
		$accounts = $account->getAccounts();
		if (!($this->hashService->validatePassword($value, $accounts->first()->getCredentialsSource()))) {
			$this->addError('Current password is not correct', 1345976880);
		}
	}

}
?>