Supabase Google sign-in says redirect_uri_mismatch: which URL Google actually wants

The "Sign in with Google" button works on your machine, then on the live site Google answers with Error 400: redirect_uri_mismatch. Sometimes it's "Access blocked: This app's request is invalid", or S