Is my-firebase-url identical to the Firebase project ID?
I found that auth/popup-closed-by-user occurs when frame-src doesn't include [project-id].firebaseapp.com
because signInWithPopup at first redirects to [project-id].firebaseapp.com/__/auth/handler even if the app is hosted on a different "non-default" Firebase hosting site