One thing needs to be remember clearly while expecting the app to be pushed in production is the app should Exercise all the requested permissions, which means the number of permission set during creation of the app, relevant API requests need to be made using all your app permissions.
Oauth call doesn't counted in the criteria to get the app passed for production.
Clearly written here
2 People are following this question.