Troubleshooting
The return address is not in the Authorized redirect URIs of the OAuth client in the Google Cloud console. The slightest difference (http, trailing slash, port) makes it refused.
Cause probable. The return address is not in the “Authorized redirect URIs” of the OAuth client in the Google Cloud console. The slightest difference (http, trailing slash, port) makes it refused.
To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.
All SAML and OpenID Connect errors
Want to see it for real? ID-Kit plays the role you are missing and shows you each step.