Following up – I got the same message from Google. I’m pretty sure the issue is this:
URIs *
Invalid Redirect: This app has a publishing status of “In production”. URI must use https:// as the scheme.
The key is the https:// as the scheme. My URI is pointing to a http:// as the redirect.
Can anyone confirm this is the same for them?