Welcome @marjanvenema!
I split this off into its own topic from the original announcements post since that change went live quite awhile ago: Pure wildcard ("*") allowed origins on app keys will no longer be recognized and will be fully deprecated - #31
Is the Glitch project public? Happy to take a look.
Can you confirm that the key you see in the URL when you see the error is the same as your API key?