From 8ee4ab9e92023b762bff1e9a28c4653e72197ac5 Mon Sep 17 00:00:00 2001
From: overtrue <anzhengchao@gmail.com>
Date: Mon, 13 Apr 2026 14:05:58 +0800
Subject: [PATCH] test(cli): cover XML cors required-field validation

---
 crates/cli/src/commands/cors.rs | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/crates/cli/src/commands/cors.rs b/crates/cli/src/commands/cors.rs
index 06dda15..f2b18f6 100644
--- a/crates/cli/src/commands/cors.rs
+++ b/crates/cli/src/commands/cors.rs
@@ -591,6 +591,38 @@ mod tests {
         assert!(error.contains("unsupported method"));
     }
 
+    #[test]
+    fn test_parse_cors_configuration_xml_rejects_missing_allowed_origin() {
+        let error = parse_cors_configuration(
+            r#"
+<CORSConfiguration>
+  <CORSRule>
+    <AllowedMethod>GET</AllowedMethod>
+  </CORSRule>
+</CORSConfiguration>
+"#,
+        )
+        .expect_err("missing xml allowed origin");
+
+        assert!(error.contains("at least one allowed origin"));
+    }
+
+    #[test]
+    fn test_parse_cors_configuration_xml_rejects_missing_allowed_method() {
+        let error = parse_cors_configuration(
+            r#"
+<CORSConfiguration>
+  <CORSRule>
+    <AllowedOrigin>https://console.example.com</AllowedOrigin>
+  </CORSRule>
+</CORSConfiguration>
+"#,
+        )
+        .expect_err("missing xml allowed method");
+
+        assert!(error.contains("at least one allowed method"));
+    }
+
     #[test]
     fn test_parse_cors_configuration_rejects_empty_allowed_origin() {
         let error = parse_cors_configuration(