WP_REST_Posts_Controller::can_access_password_content( WP_Post $post, WP_REST_Request $request ): bool

601	public function can_access_password_content( $post, $request ) {602		if ( empty( $post->post_password ) ) {603			// No filter required.604			return false;605		}606 607		/*608		 * Users always gets access to password protected content in the edit609		 * context if they have the `edit_post` meta capability.610		 */611		if (612			'edit' === $request['context'] &&613			current_user_can( 'edit_post', $post->ID )614		) {615			return true;616		}617 618		// No password, no auth.619		if ( empty( $request['password'] ) ) {620			return false;621		}622 623		// Double-check the request password.624		return hash_equals( $post->post_password, $request['password'] );625	}