Google Sign-In on Android: Credential Manager error 28444 "Developer console is not set up correctly" — broken after Capacitor 7.0.0 → 7.6.x

[brunelleservat-blip]

Google Sign-In on Android: Credential Manager error 28444

"Developer console is not set up correctly" — broken after Capacitor 7.0.0 → 7.6.x

Hi,

After upgrading Capacitor from ^7.0.0 to ^7.6.x, Google Sign-In on Android
is broken with error 28444. iOS works perfectly fine with the exact same config.

Stack

• Ionic / Angular 17
• @capgo/capacitor-social-login@8.3.13 (CredentialManager)
• Android emulator (API ~34) + physical device — both fail
• iOS: working fine ✅

The error

GetCredentialCustomException: [28444] Developer console is not set up correctly.
  at ConversionUtilsKt.toJetpackGetException(ConversionUtils.kt:102)
  at CredentialProviderFrameworkImpl.convertToJetpackGetException(...)

User flow: account picker opens → user selects account → silently back to
login page, no token received.

What's strange

• iOS works fine with the exact same webClientId config
• Same app from the Play Store still works fine
• Fails on both emulator and physical device
• All SHA-1s correctly registered in Cloud Console

Cloud Console config (all same project)

• ✅ OAuth Web client → passed as webClientId
• ✅ Android client (release) + Play App Signing SHA-1
• ✅ Android client (upload key) + local keystore SHA-1
• ✅ Android client (debug) + debug.keystore SHA-1
• ✅ Consent screen: In production, External
• ✅ APIs: Identity Toolkit + People API

Already tried

• Verified SHA-1 via keytool -printcert -jarfile
• Verified webClientId embedded in APK via adb
• Bumped androidx.credentials 1.3.0 → 1.5.0 — no change
• Cleared Google Play Services cache, reinstalled app

Is there something that changed in @capacitor/android between 7.0.0 and 7.6.x
that could affect CredentialManager? Any help appreciated!