From d9347a25deef3ff760d353ac69127949fcd5ae9a Mon Sep 17 00:00:00 2001
From: Daniel Salazar <daniel.salazar@puter.com>
Date: Sun, 4 Oct 2026 05:34:34 -0700
Subject: [PATCH] test(fs): expect the legacy-signature flag in the signing
 config

---
 .../controllers/fs/legacyFsHelpers.test.ts       | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/src/backend/controllers/fs/legacyFsHelpers.test.ts b/src/backend/controllers/fs/legacyFsHelpers.test.ts
index 08015b548..7625909d3 100644
--- a/src/backend/controllers/fs/legacyFsHelpers.test.ts
+++ b/src/backend/controllers/fs/legacyFsHelpers.test.ts
@@ -256,7 +256,21 @@ describe('signingConfigFromAppConfig', () => {
                 url_signature_secret: 's3cret',
                 api_base_url: 'https://api.test',
             } as never),
-        ).toEqual({ secret: 's3cret', apiBaseUrl: 'https://api.test' });
+        ).toEqual({
+            secret: 's3cret',
+            apiBaseUrl: 'https://api.test',
+            allowLegacySignatures: true,
+        });
+    });
+
+    it('stops accepting pre-binding signatures when legacy_file_signatures is false', () => {
+        expect(
+            signingConfigFromAppConfig({
+                url_signature_secret: 's3cret',
+                api_base_url: 'https://api.test',
+                legacy_file_signatures: false,
+            } as never).allowLegacySignatures,
+        ).toBe(false);
     });
 
     it('fails loudly when the signing secret is missing', () => {