Is my-firebase-url
identical to the Firebase project ID?
I found that auth/popup-closed-by-user
occurs when frame-src
doesn't include [project-id].firebaseapp.com
because signInWithPopup
at first redirects to [project-id].firebaseapp.com/__/auth/handler
even if the app is hosted on a different "non-default" Firebase hosting site