No matter how many times I remove the square module and reinstall, generate a new sandbox OAuth secret & try to use the sandbox credentials, whenever I click the green button in ZC to get tokens via OAuth, I receive this error. If I use my production credentials, the module receives its tokens and becomes active.

Also, could you take a screenshot of the modal challenge that pops up on your website if the transaction does require a two-factor code such as via text or email for SCA? I'm curious to see how this looks and at what point it is shown. I've tried a few test transactions using my own cards and as yet haven't seen any challenges.

Click image for larger version. 

Name:	Screenshot 2021-06-06 at 09.09.23.png 
Views:	85 
Size:	21.9 KB 
ID:	19606