You neet to publish app in GPGS in Google play console (if publish button disable, resolve conflicts below) and set application sign SHA1 (not upload sign) to Android oAuth in GoogleCloudConsole. In unity => Windows => Google Play => Android Setup - set Web client ID (not application alient id). GPGS worked before publishing because Unity make other SHA-1 for .apk files, for .aab files work other rules.