@genesislcap/foundation-auth 15.22.0 → 15.22.2

package/dist/dts/store/authFormEntry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authFormEntry.d.ts","sourceRoot":"","sources":["../../../src/store/authFormEntry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAiB,KAAK,EAAE,MAAM,+BAA+B,CAAC;AAOpF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAuB,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,oBAAoB,EAAE,IAAI,CAAC;IAC3B,2BAA2B,EAAE,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,+BAA+B,EAAE,MAAM,CAAC;IACxC,2BAA2B,EAAE,OAAO,CAAC;IACrC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,mBAAoB,SAAQ,cAAc,CAAC,qBAAqB,CAAC;KAAG;CAC/E;AAED,KAAK,gBAAgB,GAAG;IACtB,iBAAiB,EAAE,IAAI,CAAC;IACxB,yBAAyB,EAAE,gBAAgB,EAAE,CAAC;IAC9C,uBAAuB,EAAE,KAAK,CAAC;IAC/B,wBAAwB,EAAE,KAAK,CAAC;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACxD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpD,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACjD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpD,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACrD,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC3D,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACvD,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACtD,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,yBACX,SAAQ,aAAa,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,gBAAgB,CACjF,YAAW,kBAAkB;IAEjB,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;IACtB,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAE5C,oDAAoD;IACxC,YAAY,EAAE,MAAM,CAAM;IAEtC,gDAAgD;IACpC,QAAQ,EAAE,MAAM,CAAM;IAElC,6CAA6C;IACjC,KAAK,EAAE,MAAM,CAAM;IAE/B,gDAAgD;IACpC,QAAQ,EAAE,MAAM,CAAM;IAElC,iDAAiD;IACrC,SAAS,EAAE,MAAM,CAAM;IAEnC,uDAAuD;IAC3C,eAAe,EAAE,MAAM,CAAM;IAEzC,oDAAoD;IACxC,YAAY,EAAE,OAAO,CAAS;IAE1C,0DAA0D;IAC9C,kBAAkB,EAAE,OAAO,CAAS;IAEhD,0DAA0D;IAC9C,kBAAkB,EAAE,MAAM,CAAM;IAE5C,+CAA+C;IACnC,OAAO,EAAE,MAAM,CAAM;IAEjC,4CAA4C;IAChC,IAAI,EAAE,gBAAgB,EAAE,CAAM;IAE1C,mDAAmD;IACvC,WAAW,EAAE,gBAAgB,CAAC;IAE1C,kDAAkD;IACtC,UAAU,EAAE,OAAO,CAAS;IAExC,mDAAmD;IACvC,WAAW,UAAS;IAEhC,mDAAmD;IACvC,WAAW,UAAS;IAEhC,mDAAmD;IACnD,IACI,WAAW,IAAI,MAAM,CAIxB;;IAeD;;OAEG;IACH,SAAS,CAAC,aAAa;IAKvB;;OAEG;cACa,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAuE5C,sDAAsD;IACtD,cAAc,gBAAoE;IAElF,6DAA6D;IAC7D,qBAAqB,gBAGnB;IAEF,yDAAyD;IACzD,iBAAiB,gBAGf;IAEF,sDAAsD;IACtD,cAAc,gBAGZ;IAEF,yDAAyD;IACzD,iBAAiB,gBAGf;IAEF,0DAA0D;IAC1D,kBAAkB,gBAGhB;IAEF,gEAAgE;IAChE,wBAAwB,gBAQtB;IAEF,6DAA6D;IAC7D,qBAAqB,gBAGnB;IAEF,4DAA4D;IAC5D,oBAAoB,gBAIjB;IAEH,0DAA0D;IAC1D,kBAAkB,gBAGhB;IAEF;;;;OAIG;IACH,SAAS,CAAC,iBAAiB,GAAU,MAAM,OAAO,EAAE,MAAM,OAAO,mBAW/D;IAEF,mDAAmD;IACnD,IAAI,WAAW,IAAI,MAAM,CAExB;CACF;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,0EAG9B,CAAC"}
+{"version":3,"file":"authFormEntry.d.ts","sourceRoot":"","sources":["../../../src/store/authFormEntry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAiB,KAAK,EAAE,MAAM,+BAA+B,CAAC;AAOpF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAuB,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,oBAAoB,EAAE,IAAI,CAAC;IAC3B,2BAA2B,EAAE,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,+BAA+B,EAAE,MAAM,CAAC;IACxC,2BAA2B,EAAE,OAAO,CAAC;IACrC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,mBAAoB,SAAQ,cAAc,CAAC,qBAAqB,CAAC;KAAG;CAC/E;AAED,KAAK,gBAAgB,GAAG;IACtB,iBAAiB,EAAE,IAAI,CAAC;IACxB,yBAAyB,EAAE,gBAAgB,EAAE,CAAC;IAC9C,uBAAuB,EAAE,KAAK,CAAC;IAC/B,wBAAwB,EAAE,KAAK,CAAC;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,kBAAmB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACxD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpD,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACjD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACpD,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACrD,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC3D,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACvD,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACtD,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChD;AAED;;;GAGG;AACH,qBAAa,yBACX,SAAQ,aAAa,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,gBAAgB,CACjF,YAAW,kBAAkB;IAEjB,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;IACtB,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAE5C,oDAAoD;IACxC,YAAY,EAAE,MAAM,CAAM;IAEtC,gDAAgD;IACpC,QAAQ,EAAE,MAAM,CAAM;IAElC,6CAA6C;IACjC,KAAK,EAAE,MAAM,CAAM;IAE/B,gDAAgD;IACpC,QAAQ,EAAE,MAAM,CAAM;IAElC,iDAAiD;IACrC,SAAS,EAAE,MAAM,CAAM;IAEnC,uDAAuD;IAC3C,eAAe,EAAE,MAAM,CAAM;IAEzC,oDAAoD;IACxC,YAAY,EAAE,OAAO,CAAS;IAE1C,0DAA0D;IAC9C,kBAAkB,EAAE,OAAO,CAAS;IAEhD,0DAA0D;IAC9C,kBAAkB,EAAE,MAAM,CAAM;IAE5C,+CAA+C;IACnC,OAAO,EAAE,MAAM,CAAM;IAEjC,4CAA4C;IAChC,IAAI,EAAE,gBAAgB,EAAE,CAAM;IAE1C,mDAAmD;IACvC,WAAW,EAAE,gBAAgB,CAAC;IAE1C,kDAAkD;IACtC,UAAU,EAAE,OAAO,CAAS;IAExC,mDAAmD;IACvC,WAAW,UAAS;IAEhC,mDAAmD;IACvC,WAAW,UAAS;IAEhC,mDAAmD;IACnD,IACI,WAAW,IAAI,MAAM,CAIxB;;IAeD;;OAEG;IACH,SAAS,CAAC,aAAa;IAKvB;;OAEG;cACa,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IA8G5C,sDAAsD;IACtD,cAAc,gBAAoE;IAElF,6DAA6D;IAC7D,qBAAqB,gBAGnB;IAEF,yDAAyD;IACzD,iBAAiB,gBAGf;IAEF,sDAAsD;IACtD,cAAc,gBAGZ;IAEF,yDAAyD;IACzD,iBAAiB,gBAGf;IAEF,0DAA0D;IAC1D,kBAAkB,gBAGhB;IAEF,gEAAgE;IAChE,wBAAwB,gBAQtB;IAEF,6DAA6D;IAC7D,qBAAqB,gBAGnB;IAEF,4DAA4D;IAC5D,oBAAoB,gBAIjB;IAEH,0DAA0D;IAC1D,kBAAkB,gBAGhB;IAEF;;;;OAIG;IACH,SAAS,CAAC,iBAAiB,GAAU,MAAM,OAAO,EAAE,MAAM,OAAO,mBAW/D;IAEF,mDAAmD;IACnD,IAAI,WAAW,IAAI,MAAM,CAExB;CACF;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,0EAG9B,CAAC"}

package/dist/dts/store/readStoredCredentials.d.ts

@@ -0,0 +1,47 @@
+import type { CredentialData, GetCredentialOptions } from '../credential/types';
+/**
+ * The subset of `CredentialManager` this helper needs. Structural on purpose: it keeps this module
+ * free of the store/config import chain (which reaches image and translation assets and so cannot
+ * be loaded by the unit-test runner), so the behaviour below is directly testable.
+ *
+ * @internal
+ */
+export interface StoredCredentialSources {
+    getCredentialsFromContainer(options?: GetCredentialOptions): Promise<CredentialData | null>;
+    /**
+     * Note the asymmetry with the container: this one is SYNCHRONOUS and yields `undefined`, not a
+     * promise of `null`. Mirrored exactly from `CredentialManager` so a real manager is assignable
+     * without a cast, and so the `?? null` normalisation below is visibly necessary rather than
+     * defensive noise.
+     */
+    getCredentialsFromCookie(): CredentialData | undefined;
+}
+/**
+ * Read any stored credential, tolerating sources that are unavailable.
+ *
+ * GENC-1581. `getCredentialsFromContainer` calls `navigator.credentials.get()`, which REJECTS
+ * outright where the Credential Management API is not permitted — most commonly a cross-origin
+ * iframe, where it throws:
+ *
+ * ```
+ * NotAllowedError: The following credential operations can only occur in a document which is
+ * same-origin with all of its ancestors: storage/retrieval of 'PasswordCredential' …
+ * ```
+ *
+ * That rejection used to propagate out of `autofill`, whose single `try` also wrapped the
+ * `DEFAULT_USER` / `DEFAULT_PASSWORD` fallback — so the defaults were skipped and the login form
+ * was left blank with nothing but a logged error. Any cross-origin embed of a Genesis app (the
+ * Genesis Create preview being the case that surfaced it) could therefore never use the configured
+ * defaults.
+ *
+ * Failing to READ a stored credential is not a reason to withhold the defaults: it means we do not
+ * know of one, which is precisely the case the fallback exists to cover. Each source is isolated so
+ * one throwing does not lose the other — a usable cookie still survives an unavailable container,
+ * which matters for the Neptune cookie upgrade path.
+ *
+ * @param sources - the credential manager
+ * @returns `[containerData, cookieData]`, either slot `null` when that source threw or held nothing
+ * @internal
+ */
+export declare function readStoredCredentials(sources: StoredCredentialSources, onError?: (message: string, err: unknown) => void): Promise<[CredentialData | null, CredentialData | null]>;
+//# sourceMappingURL=readStoredCredentials.d.ts.map

package/dist/dts/store/readStoredCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readStoredCredentials.d.ts","sourceRoot":"","sources":["../../../src/store/readStoredCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,2BAA2B,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC5F;;;;;OAKG;IACH,wBAAwB,IAAI,cAAc,GAAG,SAAS,CAAC;CACxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,GAChD,OAAO,CAAC,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC,CAiBzD"}

package/dist/dts/store/readStoredCredentials.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=readStoredCredentials.test.d.ts.map

package/dist/dts/store/readStoredCredentials.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readStoredCredentials.test.d.ts","sourceRoot":"","sources":["../../../src/store/readStoredCredentials.test.ts"],"names":[],"mappings":""}

package/dist/esm/store/authFormEntry.js

@@ -6,6 +6,7 @@ import { AuthConfig } from '../config/config';
 import { CredentialManager, credentialSeparator } from '../credential';
 import { IDPService } from '../services';
 import { logger } from '../utils';
+import { readStoredCredentials } from './readStoredCredentials';
 /**
  * Default AuthFormEntryStore.
  * @public
@@ -120,8 +121,40 @@ export class DefaultAuthFormEntryStore extends AbstractStore {
                  * from cookies if the container is empty. These cookies become irrelevant after first login using container.
                  */
                 this.autofilling = true;
-                const containerData = yield this.credentialManager.getCredentialsFromContainer();
-                const cookieData = yield this.credentialManager.getCredentialsFromCookie();
+                /**
+                 * Stored-credential lookup is BEST EFFORT and must not take the DEFAULT_* fallback below down
+                 * with it. `getCredentialsFromContainer` calls `navigator.credentials.get()`, which REJECTS
+                 * outright in contexts where the Credential Management API is unavailable — most commonly a
+                 * cross-origin iframe, where it throws
+                 *
+                 *   NotAllowedError: The following credential operations can only occur in a document which
+                 *   is same-origin with all of its ancestors: storage/retrieval of 'PasswordCredential' …
+                 *
+                 * Previously one `try` wrapped both this lookup and the DEFAULT_USER/DEFAULT_PASSWORD
+                 * fallback, so that rejection skipped the fallback entirely and the form was left blank with
+                 * only a logged error to show for it. Anything that embeds a Genesis app cross-origin — the
+                 * Genesis Create preview being the case that surfaced it — could therefore never use the
+                 * configured defaults.
+                 *
+                 * Failing to READ a stored credential is not a reason to withhold the defaults: it means we
+                 * do not know of one, which is exactly the `!credentialData` case the fallback exists for.
+                 */
+                const [containerData, cookieData] = yield readStoredCredentials(this.credentialManager, 
+                /**
+                 * An unavailable credential store is EXPECTED in a cross-origin embed, so it logs at
+                 * `debug` — but a genuine malfunction should still be audible. `getCredentialsFromCookie`
+                 * does `JSON.parse(cookie)`, so a malformed cookie throws a SyntaxError through here, and
+                 * that wants saying out loud. `credentialManager` already uses `warn` for the adjacent
+                 * "not available in this browser" case.
+                 */
+                (message, err) => {
+                    const name = err instanceof Error ? err.name : '';
+                    const expected = name === 'NotAllowedError' || name === 'SecurityError';
+                    if (expected)
+                        logger.debug(message, err);
+                    else
+                        logger.warn(message, err);
+                });
                 const [normalisedData, canRemoveCookie] = this.credentialManager.normaliseLegacyCredentialData(containerData, cookieData);
                 if (cookieData && canRemoveCookie) {
                     /**
@@ -130,13 +163,6 @@ export class DefaultAuthFormEntryStore extends AbstractStore {
                     this.credentialManager.removeCookie();
                 }
                 credentialData = normalisedData;
-                if (!credentialData && (DEFAULT_USER || DEFAULT_PASSWORD || DEFAULT_ORGANISATION)) {
-                    this.username = DEFAULT_USER !== null && DEFAULT_USER !== void 0 ? DEFAULT_USER : '';
-                    this.password = DEFAULT_PASSWORD !== null && DEFAULT_PASSWORD !== void 0 ? DEFAULT_PASSWORD : '';
-                    if (this.config.fields.organisation && DEFAULT_ORGANISATION) {
-                        this.organisation = DEFAULT_ORGANISATION;
-                    }
-                }
                 if (credentialData) {
                     const passwordCredentials = credentialData;
                     this.username = (_a = passwordCredentials.name) !== null && _a !== void 0 ? _a : '';
@@ -176,6 +202,20 @@ export class DefaultAuthFormEntryStore extends AbstractStore {
             catch (err) {
                 logger.error('An error occurred attempting to get and autofill from stored credentials.', err);
             }
+            /**
+             * OUTSIDE the try on purpose. The defaults are the fallback for "we have no stored credential",
+             * and every way of arriving there — none stored, an unreadable store, or an unexpected throw
+             * anywhere above — must reach them. Keeping this inside the try is what made a single rejecting
+             * call silently skip it, and leaving it there would preserve that shape while relying on
+             * nothing above it ever throwing again.
+             */
+            if (!credentialData && (DEFAULT_USER || DEFAULT_PASSWORD || DEFAULT_ORGANISATION)) {
+                this.username = DEFAULT_USER !== null && DEFAULT_USER !== void 0 ? DEFAULT_USER : '';
+                this.password = DEFAULT_PASSWORD !== null && DEFAULT_PASSWORD !== void 0 ? DEFAULT_PASSWORD : '';
+                if (this.config.fields.organisation && DEFAULT_ORGANISATION) {
+                    this.organisation = DEFAULT_ORGANISATION;
+                }
+            }
             this.autofilling = false;
             return Promise.resolve(!!credentialData);
         });

package/dist/esm/store/readStoredCredentials.js

@@ -0,0 +1,48 @@
+import { __awaiter } from "tslib";
+/**
+ * Read any stored credential, tolerating sources that are unavailable.
+ *
+ * GENC-1581. `getCredentialsFromContainer` calls `navigator.credentials.get()`, which REJECTS
+ * outright where the Credential Management API is not permitted — most commonly a cross-origin
+ * iframe, where it throws:
+ *
+ * ```
+ * NotAllowedError: The following credential operations can only occur in a document which is
+ * same-origin with all of its ancestors: storage/retrieval of 'PasswordCredential' …
+ * ```
+ *
+ * That rejection used to propagate out of `autofill`, whose single `try` also wrapped the
+ * `DEFAULT_USER` / `DEFAULT_PASSWORD` fallback — so the defaults were skipped and the login form
+ * was left blank with nothing but a logged error. Any cross-origin embed of a Genesis app (the
+ * Genesis Create preview being the case that surfaced it) could therefore never use the configured
+ * defaults.
+ *
+ * Failing to READ a stored credential is not a reason to withhold the defaults: it means we do not
+ * know of one, which is precisely the case the fallback exists to cover. Each source is isolated so
+ * one throwing does not lose the other — a usable cookie still survives an unavailable container,
+ * which matters for the Neptune cookie upgrade path.
+ *
+ * @param sources - the credential manager
+ * @returns `[containerData, cookieData]`, either slot `null` when that source threw or held nothing
+ * @internal
+ */
+export function readStoredCredentials(sources, onError) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        let containerData = null;
+        let cookieData = null;
+        try {
+            containerData = (_a = (yield sources.getCredentialsFromContainer())) !== null && _a !== void 0 ? _a : null;
+        }
+        catch (err) {
+            onError === null || onError === void 0 ? void 0 : onError('Credential container unavailable; continuing without a stored credential.', err);
+        }
+        try {
+            cookieData = (_b = (yield sources.getCredentialsFromCookie())) !== null && _b !== void 0 ? _b : null;
+        }
+        catch (err) {
+            onError === null || onError === void 0 ? void 0 : onError('Credential cookie unavailable; continuing without a stored credential.', err);
+        }
+        return [containerData, cookieData];
+    });
+}

package/dist/esm/store/readStoredCredentials.test.js

@@ -0,0 +1,100 @@
+import { __awaiter } from "tslib";
+import { assert, suite } from '@genesislcap/foundation-testing';
+import { readStoredCredentials } from './readStoredCredentials';
+/**
+ * GENC-1581 — the DEFAULT_USER / DEFAULT_PASSWORD fallback must survive a Credential Management
+ * API that rejects.
+ *
+ * `getCredentialsFromContainer()` calls `navigator.credentials.get()`, which throws outright where
+ * the API is unavailable — most commonly a cross-origin iframe:
+ *
+ *   NotAllowedError: The following credential operations can only occur in a document which is
+ *   same-origin with all of its ancestors: storage/retrieval of 'PasswordCredential' …
+ *
+ * One `try` used to wrap both that lookup and the DEFAULT_* fallback, so the rejection skipped the
+ * fallback and left the form blank. `readStoredCredentials` now isolates the lookup.
+ *
+ * These tests drive `readStoredCredentials` directly rather than `autofill`, because `autofill`
+ * reads the DEFAULT_* values from build-time defines that a unit test cannot set. What is testable
+ * — and what actually broke — is that a throwing source degrades to `null` instead of propagating.
+ */
+const s = suite('readStoredCredentials (GENC-1581)');
+/**
+ * The helper lives in its own module precisely so it can be tested: `authFormEntry` transitively
+ * imports image and translation assets through `config/config.ts`, which the unit-test runner
+ * cannot load.
+ */
+const read = (manager) => readStoredCredentials(manager);
+const NOT_ALLOWED = () => {
+    const err = new Error("The following credential operations can only occur in a document which is same-origin with all of its ancestors: storage/retrieval of 'PasswordCredential' and 'FederatedCredential', storage of 'PublicKeyCredential'.");
+    err.name = 'NotAllowedError';
+    throw err;
+};
+s('a rejecting credential container degrades to null instead of throwing', () => __awaiter(void 0, void 0, void 0, function* () {
+    const result = read({
+        getCredentialsFromContainer: NOT_ALLOWED,
+        getCredentialsFromCookie: () => undefined,
+    });
+    const [containerData, cookieData] = yield result;
+    assert.is(containerData, null, 'a NotAllowedError must not escape');
+    assert.is(cookieData, null);
+}));
+s('a rejecting cookie read degrades to null too', () => __awaiter(void 0, void 0, void 0, function* () {
+    const result = read({
+        getCredentialsFromContainer: () => __awaiter(void 0, void 0, void 0, function* () { return null; }),
+        getCredentialsFromCookie: NOT_ALLOWED,
+    });
+    const [containerData, cookieData] = yield result;
+    assert.is(containerData, null);
+    assert.is(cookieData, null);
+}));
+s('both rejecting still resolves — the caller can reach its fallback', () => __awaiter(void 0, void 0, void 0, function* () {
+    // The exact cross-origin-iframe shape: neither source is usable. Before the fix this rejected
+    // and the DEFAULT_* fallback below the call site never ran.
+    const result = read({
+        getCredentialsFromContainer: NOT_ALLOWED,
+        getCredentialsFromCookie: NOT_ALLOWED,
+    });
+    assert.equal(yield result, [null, null]);
+}));
+s('a real stored credential is still returned untouched', () => __awaiter(void 0, void 0, void 0, function* () {
+    // The guard must not swallow success: a working container still wins over the defaults.
+    const stored = { id: 'JohnDoe', name: 'JohnDoe', password: 'hunter2' };
+    const result = read({
+        getCredentialsFromContainer: () => __awaiter(void 0, void 0, void 0, function* () { return stored; }),
+        getCredentialsFromCookie: () => undefined,
+    });
+    const [containerData] = yield result;
+    assert.is(containerData, stored);
+}));
+s('a cookie credential survives a throwing container (the legacy upgrade path)', () => __awaiter(void 0, void 0, void 0, function* () {
+    // Neptune upgrade: container unavailable, cookie present. Isolating the two reads means the
+    // cookie is still found — previously the container throw lost it as well.
+    const cookie = { id: 'JaneDoe', name: 'JaneDoe', password: 'hunter2' };
+    const result = read({
+        getCredentialsFromContainer: NOT_ALLOWED,
+        getCredentialsFromCookie: () => cookie,
+    });
+    const [containerData, cookieData] = yield result;
+    assert.is(containerData, null);
+    assert.is(cookieData, cookie, 'a usable cookie must not be lost to an unrelated container error');
+}));
+s('reports each failure through onError so the caller can choose a log level', () => {
+    // The helper deliberately does not decide severity: an unavailable store is expected in a
+    // cross-origin embed (debug), while a malformed cookie hitting JSON.parse is a real malfunction
+    // (warn). authFormEntry discriminates on error name, which it can only do if BOTH the message
+    // and the original error reach it.
+    const seen = [];
+    const bad = () => {
+        const e = new Error('Unexpected token in JSON');
+        e.name = 'SyntaxError';
+        throw e;
+    };
+    return readStoredCredentials({ getCredentialsFromContainer: NOT_ALLOWED, getCredentialsFromCookie: bad }, (message, err) => seen.push({ message, name: err instanceof Error ? err.name : '' })).then(() => {
+        assert.is(seen.length, 2, 'both sources report');
+        assert.equal(seen.map((x) => x.name), ['NotAllowedError', 'SyntaxError'], 'the original error is passed through, not just a message');
+        assert.ok(seen[0].message.includes('container'));
+        assert.ok(seen[1].message.includes('cookie'));
+    });
+});
+s.run();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@genesislcap/foundation-auth",
   "description": "Genesis Foundation Auth",
-  "version": "15.22.0",
+  "version": "15.22.2",
   "license": "SEE LICENSE IN license.txt",
   "main": "dist/esm/index.js",
   "types": "dist/foundation-auth.d.ts",
@@ -134,25 +134,25 @@
     }
   },
   "devDependencies": {
-    "@genesislcap/foundation-testing": "15.22.0",
-    "@genesislcap/genx": "15.22.0",
-    "@genesislcap/rollup-builder": "15.22.0",
-    "@genesislcap/ts-builder": "15.22.0",
-    "@genesislcap/uvu-playwright-builder": "15.22.0",
-    "@genesislcap/vite-builder": "15.22.0",
-    "@genesislcap/webpack-builder": "15.22.0"
+    "@genesislcap/foundation-testing": "15.22.2",
+    "@genesislcap/genx": "15.22.2",
+    "@genesislcap/rollup-builder": "15.22.2",
+    "@genesislcap/ts-builder": "15.22.2",
+    "@genesislcap/uvu-playwright-builder": "15.22.2",
+    "@genesislcap/vite-builder": "15.22.2",
+    "@genesislcap/webpack-builder": "15.22.2"
   },
   "dependencies": {
-    "@genesislcap/foundation-comms": "15.22.0",
-    "@genesislcap/foundation-events": "15.22.0",
-    "@genesislcap/foundation-i18n": "15.22.0",
-    "@genesislcap/foundation-logger": "15.22.0",
-    "@genesislcap/foundation-state-machine": "15.22.0",
-    "@genesislcap/foundation-store": "15.22.0",
-    "@genesislcap/foundation-ui": "15.22.0",
-    "@genesislcap/foundation-user": "15.22.0",
-    "@genesislcap/foundation-utils": "15.22.0",
-    "@genesislcap/foundation-zero": "15.22.0",
+    "@genesislcap/foundation-comms": "15.22.2",
+    "@genesislcap/foundation-events": "15.22.2",
+    "@genesislcap/foundation-i18n": "15.22.2",
+    "@genesislcap/foundation-logger": "15.22.2",
+    "@genesislcap/foundation-state-machine": "15.22.2",
+    "@genesislcap/foundation-store": "15.22.2",
+    "@genesislcap/foundation-ui": "15.22.2",
+    "@genesislcap/foundation-user": "15.22.2",
+    "@genesislcap/foundation-utils": "15.22.2",
+    "@genesislcap/foundation-zero": "15.22.2",
     "@microsoft/fast-components": "2.30.6",
     "@microsoft/fast-element": "1.14.0",
     "@microsoft/fast-foundation": "2.50.0",