@dobey you were correct, the location call was just being ignored. Adding the necessary lines enabled access for the webapp. Thanks for the direction.
I copied this from the Morph browser code:
onFeaturePermissionRequested: {
switch(feature) {
case WebEngineView.Geolocation:
grantFeaturePermission(securityOrigin, feature, true);
break;
}
}
there is of course cases for other feature requests in the code I copied, and this just grants permission passing responsibility for approving the call to the OS. This does work around the issue where Morph asks permission each and everytime location is called, without the trouble of approving different sites as there is only one.