Add app's URL to the Authorized JavaScript origins list in Google Cloud Console. With the app in "testing" mode, only users you add in the Google Cloud Console can access it. If someone with an email ...