It seems very hard or downright impossible to take advantage of them purely in JavaScript, without a server side script (like one in PHP) helping (like masking the secret key.) However, I can only use JavaScript on this project. Is it still possible to use AuthSub or OAuth?
You can't use OAuth without doing crypto in browser, but you can use AuthSub. In fact google have a client library that makes it really easy :-