Fixed OAuth2Util crash with IllegalArgumentException when extracting expiration time from arbitrary Bearer token that looks like jwt.

Author: Ning Kang

core/src/main/java/org/apache/iceberg/rest/auth/OAuth2Util.java

@@ -441,7 +441,7 @@ static Long expiresAtMillis(String token) {
     JsonNode node;
     try {
       node = JsonUtil.mapper().readTree(Base64.getUrlDecoder().decode(parts.get(1)));
-    } catch (IOException e) {
+    } catch (IOException | IllegalArgumentException e) {
       return null;
     }
 

core/src/test/java/org/apache/iceberg/rest/auth/TestOAuth2Util.java

@@ -73,6 +73,7 @@ public void testOAuthScopeTokenValidation() {
   public void testExpiresAt() {
     assertThat(OAuth2Util.expiresAtMillis(null)).isNull();
     assertThat(OAuth2Util.expiresAtMillis("not a token")).isNull();
+    assertThat(OAuth2Util.expiresAtMillis("a.b.c token looks like jwt but not jwt and too short per section")).isNull();
 
     // expires at epoch second = 1
     String token =