APP_SECRET vs API_SECRET

Ahh, ok. But then surely the reference on the below link must be incorrect? It’s the first related search that comes up on Google when trying to find out how to assign “secret” on the login form.