Set your production url as the authentication url in Supabase and then also add http://localhost:3000/** as a secondary authorized url and it should work.

In your screenshot, you only need that long supabase.co url in the allowed list, not localhost.