My guess is that your client is registered incorrectly in Google Cloud Console. A ‘WEB’ client is typically a server or Javascript application. An iOS app should be registered as an iOS client.
https://developers.google.com/identity/protocols/OAuth2InstalledApp#creatingcred