ERROR: Authentication failure! invalid_credentials: OAuth2::Error - jruby 9.0.5.0 - rails 3.2.13 - devise 3.2.4 - omniauth-google-oauth2 0.3.1

devise.rb

Devise.setup do |config|
  config.omniauth :google_oauth2, 'key', 'secret',
    {
      :scope => ['userinfo.email', 'https://www.googleapis.com/auth/gmail.labels', 'userinfo.profile'],
      :prompt => "select_account",
      :image_aspect_ratio => "square",
      :image_size => 50,
      :include_granted_scopes => true,
      :access_type => 'offline',
    }
#..,
end

environment.txt

- jruby 9.0.5.0 (2.2.3) 2016-01-26 7bee00d Java HotSpot(TM) 64-Bit Server VM 25.72-b15 on 1.8.0_72-b15 +jit [darwin-x86_64]
- Rails 3.2.13

error.txt

(google_oauth2) Callback phase initiated.
(google_oauth2) Authentication failure! invalid_credentials: OAuth2::Error, {
"access_token" : 'xyz',
"token_type" : "Bearer", 
"expires_in" : 3596
"id_token" : "xyz123..."
}

Gemfile

source 'http://rubygems.org'

gem 'rails', '3.2.13'

group :assets do
  gem 'sass-rails', " ~> 3.2.3"
  gem 'coffee-rails', " ~> 3.2.1"
  gem 'uglifier', '>=1.0.3'
  #gem 'turbo-sprockets-rails3'
end

platforms :jruby do
  gem 'jruby-rack', '>= 1.1.14' # Going up to 1.1.15 caused Quartz to fail hard on trinidad server startup. Did NOT test in the WAR environment so may be able to upgrade within non-dev env's. As of Jul 25, 2014. (https://github.com/jruby/jruby-rack/blob/1.1.15/History.md) -- JVS
  
  gem 'jruby-jars', '>= 1.7.12'
  
  gem 'jruby-rack-worker', require: nil
  
  gem "activerecord-jdbc-adapter", "~> 1.2.9"
  gem "activerecord-jdbcmysql-adapter", "~> 1.2.9"

  gem "trinidad",   group: :development # Web server
  gem 'trinidad_diagnostics_extension', group: :development
  gem 'puma', group: :development #alternative webserver
  gem 'kramdown',   group: :development # Alternative to redcarpet for YARD documentation tool

  gem "warbler", group: :development # JRuby WAR file package builder
  gem 'jruby-lint', group: :development # Search for incompatibilities with JRuby
  gem 'ruby-debug', group: :development # Support console debugging
  
  gem "therubyrhino" # JS Runtime for Java

  gem 'quartz-jruby', git: 'git://github.com/kml/quartz-jruby.git' # The Quartz scheduling implementation for JRuby allowing for 'crons' to be built into the shared JRuby deployed instance

  gem 'log4jruby', require: nil # A Jruby Log4j interface, used at least in the Quartz scheduler classes in lib/quartz
end

platforms :ruby do
  gem 'mysql2'
  gem 'therubyracer' # JS Runtime
  gem 'thin'
  
  gem 'redcarpet',  group: :development # Parse markdown, used for documentation, YARD
  
  gem 'unicode' # I don't think this is used... not compat with Jruby. -- JVS
end

gem 'execjs'

# Use 1.0.1 because default uses 0.8 and that does not have compat with jruby
gem 'faye', '~> 1.0.1'

# Hardlock rake to fix rollbar issue https://github.com/rollbar/rollbar-gem/issues/396
gem 'rake' '10.5.0'

gem 'jquery-rails'
gem 'remotipart'
gem 'authlogic'
gem 'paperclip', "~> 3.0"

gem 'awesome_print'
gem 'uuidtools'
gem 'mush'
gem 'rest-client', "~> 1.6.7"
gem 'xml-simple'
gem 'geoip'
gem 'fastercsv'

gem "newrelic_rpm"
gem 'google_url_shortener'

# UrlSafeBase64
gem 'url_safe_base64'


gem 'km'
gem 'delayed_job_active_record'
gem 'sidekiq'
gem 'daemons'
gem 'whenever'

gem 'exception_notification_rails3', :require => 'exception_notifier'

gem 'oauth'

gem 'google-api-client', '0.9'
gem 'mail'

# used for salesforce oauth
#gem 'oauth2', :git => 'git://github.com/aaronvegh/oauth2.git'
gem 'oauth2'

gem 'ParseUserAgent'
gem 'useragent' #,  :git => 'git://github.com/josh/useragent.git'
gem 'browser',    :git => 'git://github.com/devbbq/browser.git'

# gem 'world-flags'
gem 'countries'
gem 'phone',      :git => "git://github.com/aaronvegh/phone.git"

gem "will_paginate", "~> 3.0"

gem 'httparty', "~> 0.11.0" # Versions above 0.11.0 cause requests to fail in packaged jars due to "cannot set_default_path: null"

gem 'rubyzip', '~> 0.9.9' # Version 1+ causes error: no such file to load

gem 'whois'
#gem 'sundawg_country_codes', :git => "git://github.com/aaronvegh/country_codes.git"

gem 'pdfkit'
gem 'google-qr'

# gem 'globalize3'
gem 'globalize', '~> 3.1.0'

#gem 'vcard', '~> 0.1.1'
#gem 'vcard', '0.1.1', :git => "https://github.com/holiday/vcard"


#gem 'max_mind', :git => "git://github.com/crushlovely/max_mind.git"
gem 'max_mind',   :git => "https://github.com/aaronvegh/max_mind.git"

gem 'colorize'
gem 'class_logger'

# gem 'net-ssh', :git => 'git://github.com/nessche/net-ssh.git'
gem 'net-ssh'

gem 'nokogiri'

gem 'stripe',     :git => 'https://github.com/stripe/stripe-ruby'

gem 'rollbar', '~> 2.8.0'

gem 'databasedotcom'
gem 'databasedotcom-rails'
gem "databasedotcom-oauth2"
gem 'json'
gem 'mini_exiftool_vendored'
gem 'validates_email_format_of'

gem 'devise', '3.2.4'
gem 'omniauth-google-oauth2', :require => "omniauth-google-oauth2"
gem 'doorkeeper', '1.3.1'
#gem 'devise_security_extension'
gem 'vero'

gem 'rails_12factor', group: :production

group :test do
	gem 'turn', :require => false
	# for performance tests
	# gem 'ruby-prof', "~> 0.11.2"
	gem 'test-unit'
end

group :production do 
  gem 'engineyard'
end

group :development do
  gem 'yard', '~> 0.8.7.4' # Documentation `bundle exec yard server`
  gem 'active_record_query_trace'
  gem 'bullet'
	gem 'pry'
	gem 'pry-rails'
	gem 'capistrano'
	gem 'rvm-capistrano', require: false
	gem 'database_cleaner'
  gem 'dotenv', '~> 2.0.2'
  
  gem 'debugger', platform: :ruby
  gem 'better_errors', platform: :ruby        # Excellent exception handling info
  gem 'binding_of_caller', platform: :ruby    # Real-time console and more detailed exception info
  gem 'rails-footnotes', '>= 3.7.9'           # Displays valuable footnotes for help in debugging
  gem 'meta_request'                          # Required and used by the Rails Panel Chrome plugin (https://github.com/dejan/rails_panel)
end

group :development, :test do
  gem 'rspec-rails', '~> 3.0.0'
  gem 'factory_girl_rails'
	gem 'capybara', '~> 2.2.0'
  gem 'rack-test'                     # API Testing
  gem 'timecop'
end

gem 'font-awesome-rails'
gem 'will_paginate-foundation'
gem 'restforce', git: "[email protected]:devbbq/restforce.git", branch: "feature/gemspec-upgrade"
gem 'smarter_csv', '~> 1.0.19', require: false

Gemfile.lock

 devise (3.2.4)
      bcrypt (~> 3.0)
      orm_adapter (~> 0.1)
      railties (>= 3.2.6, < 5)
      thread_safe (~> 0.1)
      warden (~> 1.2.3)
      
  oauth (0.5.1)
    oauth2 (1.1.0)
      faraday (>= 0.8, < 0.10)
      jwt (~> 1.0, < 1.5.2)
      multi_json (~> 1.3)
      multi_xml (~> 0.5)
      rack (>= 1.2, < 3)
    omniauth (1.3.1)
      hashie (>= 1.2, < 4)
      rack (>= 1.0, < 3)
    omniauth-google-oauth2 (0.3.1)
      jwt (~> 1.0)
      multi_json (~> 1.3)
      omniauth (>= 1.1.1)
      omniauth-oauth2 (>= 1.3.1)
    omniauth-oauth2 (1.4.0)
      oauth2 (~> 1.0)
      omniauth (~> 1.2)