feat(oauth): add builder for provider

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
     rust:
         name: Rust
-        uses: RustForWeb/.github/.github/workflows/rust.yml@c18f3b7315df398b6af8d03f823e31daeda63114
+        uses: RustForWeb/.github/.github/workflows/rust.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
         with:
             enable-test: false
             target: wasm32-unknown-unknown

.github/workflows/labels.yml

@@ -10,4 +10,4 @@ permissions:
 jobs:
     labels:
         name: Labels
-        uses: RustForWeb/.github/.github/workflows/labels.yml@c18f3b7315df398b6af8d03f823e31daeda63114
+        uses: RustForWeb/.github/.github/workflows/labels.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1

.github/workflows/publish.yml

@@ -11,4 +11,4 @@ permissions:
 jobs:
     publish:
         name: Publish
-        uses: RustForWeb/.github/.github/workflows/publish.yml@c18f3b7315df398b6af8d03f823e31daeda63114
+        uses: RustForWeb/.github/.github/workflows/publish.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1

.github/workflows/release.yml

@@ -18,6 +18,6 @@ permissions:
 jobs:
     release:
         name: Release
-        uses: RustForWeb/.github/.github/workflows/release.yml@c18f3b7315df398b6af8d03f823e31daeda63114
+        uses: RustForWeb/.github/.github/workflows/release.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
         with:
             bump: ${{ inputs.bump }}

.github/workflows/website.yml

@@ -18,6 +18,6 @@ concurrency:
 jobs:
     book:
         name: Book
-        uses: RustForWeb/.github/.github/workflows/book.yml@c18f3b7315df398b6af8d03f823e31daeda63114
+        uses: RustForWeb/.github/.github/workflows/book.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
         with:
             combine: false

deny.toml

@@ -5,6 +5,7 @@ all-features = true
 ignore = [
     { id = "RUSTSEC-2023-0071", reason = "No safe upgrade available for `rsa`." },
     { id = "RUSTSEC-2024-0436", reason = "No maintained version available for `paste`." },
+    { id = "RUSTSEC-2026-0173", reason = "No maintained version available for `proc-macro-error2`." },
 ]
 yanked = "deny"
 

packages/methods/shield-oauth/src/provider.rs

@@ -1,3 +1,4 @@
+use bon::Builder;
 use oauth2::{
     AuthUrl, Client, ClientId, ClientSecret, EndpointMaybeSet, EndpointNotSet, IntrospectionUrl,
     RedirectUrl, RevocationUrl, StandardRevocableToken, TokenUrl,
@@ -37,11 +38,18 @@ pub enum OauthProviderPkceCodeChallenge {
     S256,
 }
 
-#[derive(Clone, Debug)]
+#[expect(clippy::duplicated_attributes)]
+#[derive(Builder, Clone, Debug)]
+#[builder(
+    on(String, into),
+    on(SecretString, into),
+    state_mod(vis = "pub(crate)")
+)]
 pub struct OauthProvider {
     pub id: String,
     pub name: String,
     pub slug: Option<String>,
+    #[builder(default = OauthProviderVisibility::Public)]
     pub visibility: OauthProviderVisibility,
     pub client_id: String,
     pub client_secret: Option<SecretString>,
@@ -55,6 +63,7 @@ pub struct OauthProvider {
     pub introspection_url_params: Option<String>,
     pub revocation_url: Option<String>,
     pub revocation_url_params: Option<String>,
+    #[builder(default = OauthProviderPkceCodeChallenge::S256)]
     pub pkce_code_challenge: OauthProviderPkceCodeChallenge,
     pub icon_url: Option<String>,
 }