I have a non-production app in which the redirect URI is set as follows with HTTP
But when a user tries to authenticate the following comes up which has the URL with HTTPS instead of HTTP
Error 400: redirect_uri_mismatch
If you’re the app developer, make sure that these request details comply with Google policies.
redirect_uri: https://localhost/index.php?entryPoint=GSuiteOauth2callback
Question
Why is it looking for the HTTPS version when it's the HTTP version that's in the redirect URIs list?
If I set it as HTTPS in redirect URIs it will work, but when user authorizes it breaks. Can we not use HTTP version of the redirect URI in test apps which haven't been published yet?