value for "iceberg.rest-catalog.oauth2.credential"

[metalshanked]

I have an Oauth2 enabled iceberg-rest-server.

Where do I enter the client id and client secret to get the token?
The only option i see is iceberg.rest-catalog.oauth2.credential which does not seem to work for client_id, client_secret or client_id:client_secret

https://trino.io/docs/current/object-storage/metastores.html#rest-catalog

Example error when trying with the client secret /id values for iceberg.rest-catalog.oauth2.credential

io.trino.spi.TrinoException: Error listing schemas for catalog iceberg: Received a success response code of 200, but failed to parse response body into OAuthTokenResponse
	at io.trino.metadata.MetadataListing.handleListingException(MetadataListing.java:358)
	at io.trino.metadata.MetadataListing.listSchemas(MetadataListing.java:99)

Thanks in advance!

[metalshanked]

To answer my own question. Trino supports client_credentials grant type.
here is a working example with keycloak

    iceberg.rest-catalog.nested-namespace-enabled=true
    iceberg.rest-catalog.case-insensitive-name-matching=true
    iceberg.rest-catalog.uri=https://iceberg-rest-server/iceberg/
    iceberg.rest-catalog.security=OAUTH2
    iceberg.rest-catalog.session=NONE
    #iceberg.rest-catalog.oauth2.token=myjwttoken # If you are using token option, ensure all cred and scope parameters are removed/commented
    iceberg.rest-catalog.oauth2.scope=test_scope
    iceberg.rest-catalog.oauth2.credential=appclientid:appclientsecret
    iceberg.rest-catalog.vended-credentials-enabled=false
    iceberg.rest-catalog.oauth2.server-uri=https://keycloakserver/realms/iceberg-realm/protocol/openid-connect/token