If you see "Access blocked" or "origin_mismatch", open check-origin.html and add that exact address in Google Cloud Console → Credentials → your OAuth client → Authorized JavaScript origins.