The issue there is that G-Suite's OAuth2 implementation doesn't yet support PKCE.