refactor(auth): rename clearSecrets to clearKeyringSecrets

The function only deletes keyring entries; auth.json cleanup is the caller's
responsibility (logout rimrafs the whole file). Renaming makes the scope
honest and avoids misleading future callers.

Author: l2ysho

src/commands/auth/logout.ts

@@ -1,6 +1,6 @@
 import { ApifyCommand } from '../../lib/command-framework/apify-command.js';
 import { AUTH_FILE_PATH } from '../../lib/consts.js';
-import { clearSecrets } from '../../lib/credentials.js';
+import { clearKeyringSecrets } from '../../lib/credentials.js';
 import { rimrafPromised } from '../../lib/files.js';
 import { updateUserId } from '../../lib/hooks/telemetry/useTelemetryState.js';
 import { success } from '../../lib/outputs.js';
@@ -25,7 +25,7 @@ export class AuthLogoutCommand extends ApifyCommand<typeof AuthLogoutCommand> {
 	static override docsUrl = 'https://docs.apify.com/cli/docs/reference#apify-logout';
 
 	async run() {
-		await clearSecrets();
+		await clearKeyringSecrets();
 		await rimrafPromised(AUTH_FILE_PATH());
 
 		await updateUserId(null);

src/lib/credentials.ts

@@ -195,11 +195,13 @@ export async function setProxyPassword(password: string, opts: { skipIfUnchanged
 }
 
 /**
- * Remove all stored secrets. Always attempts to clear the keyring even when the
- * current backend is `file`, so toggling `APIFY_DISABLE_KEYRING=1` between login
- * and logout does not orphan entries the user has no in-CLI way to discover.
+ * Remove the token and proxy-password entries from the OS keyring. Always attempts the
+ * keyring deletes even when the current backend is `file`, so toggling
+ * `APIFY_DISABLE_KEYRING=1` between login and logout does not orphan entries the user
+ * has no in-CLI way to discover. Plaintext secrets in `auth.json` are the caller's
+ * responsibility (e.g. `logout` removes the whole file).
  */
-export async function clearSecrets(): Promise<void> {
+export async function clearKeyringSecrets(): Promise<void> {
 	await deleteKeyring(TOKEN_ACCOUNT);
 	await deleteKeyring(PROXY_PASSWORD_ACCOUNT);
 }

test/local/lib/credentials.test.ts

@@ -6,7 +6,7 @@ import { cryptoRandomObjectId } from '@apify/utilities';
 import { AUTH_FILE_PATH, GLOBAL_CONFIGS_FOLDER } from '../../../src/lib/consts.js';
 import {
 	__resetCredentialsForTests,
-	clearSecrets,
+	clearKeyringSecrets,
 	ensureMigrated,
 	getBackend,
 	getProxyPassword,
@@ -134,16 +134,16 @@ describe('credentials', () => {
 			expect(existsSync(AUTH_FILE_PATH())).toBe(false);
 		});
 
-		it('clearSecrets() removes the token and proxy entries from the keyring', async () => {
+		it('clearKeyringSecrets() removes the token and proxy entries from the keyring', async () => {
 			await setToken('tok_123');
 			await setProxyPassword('pw_abc');
-			await clearSecrets();
+			await clearKeyringSecrets();
 			expect(await getToken()).toBeUndefined();
 			expect(await getProxyPassword()).toBeUndefined();
 		});
 	});
 
-	describe('clearSecrets()', () => {
+	describe('clearKeyringSecrets()', () => {
 		it('clears the keyring token entry even when APIFY_DISABLE_KEYRING=1 is set at logout time', async () => {
 			vitest.stubEnv('APIFY_DISABLE_KEYRING', '');
 			await setToken('tok_123');
@@ -153,7 +153,7 @@ describe('credentials', () => {
 			vitest.stubEnv('APIFY_DISABLE_KEYRING', '1');
 			expect(await getBackend()).toBe('file');
 
-			await clearSecrets();
+			await clearKeyringSecrets();
 			expect(keyringStore.get('com.apify.cli:token')).toBeUndefined();
 		});
 	});