On my end, I had to set both the javascript origin uri (there's a footnote underneath that section that says you need to set if you're coming from web browser) and the redirect uri.