localhost:3000 is Supabase's default Site URL. When the redirect you ask for isn't on the allow list, Supabase falls back to the Site URL.
Supabase dashboard → Authentication → URL Configuration:
- Site URL:
https://yourdomain.com - Redirect URLs: add
https://yourdomain.com/**, and your lovable.app URL if you still use it (https://yourapp.lovable.app/**)
In Google Cloud Console the authorized redirect URI must be the Supabase callback (https://<ref>.supabase.co/auth/v1/callback), not your own domain. That part you probably already have since the preview works.