LoginUrl
Corex\Config\Security\LoginProtection\LoginUrl · class · Config layer
Where the login is served from, in one place. The guard rewrites login URLs, the Security Center displays the address, and the save endpoint echoes it back. If those three built the URL separately they would drift, and the failure is nasty: the screen shows an address the site does not answer, which is exactly the moment an owner bookmarks it and signs out.
Public API
Section titled “Public API”forSettings(LoginProtectionSettings $settings, ?string $scheme): string
Section titled “forSettings(LoginProtectionSettings $settings, ?string $scheme): string”defaultUrl(): string
Section titled “defaultUrl(): string”The stock login, built without the filters that would rewrite it. wp_login_url() is off-limits here: LoginRouteGuard’s filters are registered in the same request and would hand back the custom address — which is how the recovery command came to print the very URL it had just disabled (DECISIONS #140).