REST API: Can't unset password

[iseulde]

Once a password is set, it's not possible to unset it. The password is explicitly prevented from being set when it's an empty string:

if ( ! empty( $schema['properties']['password'] ) && isset( $request['password'] ) && '' !== $request['password'] ) {
  $prepared_post->post_password = $request['password'];
  ...

Is there a reason for this? Not sure if I'm missing something.

[danielbachhuber]

Itsabug!

[iseulde]

Nice. Works well.

[swissspidy]

Why are there two separate error messages? 'A post can not be sticky and have a password.' and 'A sticky post can not be password protected.'

[danielbachhuber]

@swissspidy Technically, there are two separate scenarios: Post already has sticky=true, vs. sticky=true is in the request.

[joehoyle]

In 39352:

REST API: Allow unsetting a post’s password.

Props danielbachhuber, iseulde.
Fixes #38919.