Google says “Access blocked” or “origin_mismatch”?
This origin has to be registered on the OAuth client. In Google Cloud → APIs & Services → Credentials, open the web client and add it under Authorized JavaScript origins:
this site's origin
Open this OAuth client in Google Cloud →Changes can take a few minutes. The password below works meanwhile.