You have to add http://localhost to your Authorized JavaScript origins, along side w/ the one w/ the port.

Google recently deprecated the legacy One Tap with the fedCM, try adding use_fedcm_for_prompt: true in your initialize call.