Accept any policy tree in FidoMetadataService

Author: emlun

webauthn-server-attestation/src/integrationTest/scala/com/yubico/fido/metadata/FidoMetadataServiceIntegrationTest.scala

@@ -2,6 +2,7 @@ package com.yubico.fido.metadata
 
 import com.fasterxml.jackson.databind.JsonNode
 import com.yubico.fido.metadata.AttachmentHint.ATTACHMENT_HINT_EXTERNAL
+import com.yubico.fido.metadata.AttachmentHint.ATTACHMENT_HINT_INTERNAL
 import com.yubico.fido.metadata.AttachmentHint.ATTACHMENT_HINT_NFC
 import com.yubico.fido.metadata.AttachmentHint.ATTACHMENT_HINT_WIRED
 import com.yubico.fido.metadata.AttachmentHint.ATTACHMENT_HINT_WIRELESS
@@ -267,6 +268,14 @@ class FidoMetadataServiceIntegrationTest
             attachmentHintsUsb,
           )
         }
+
+        it("a Windows Hello attestation.") {
+          check(
+            "Windows Hello.*",
+            RealExamples.WindowsHelloTpm,
+            Set(ATTACHMENT_HINT_INTERNAL),
+          )
+        }
       }
     }
   }

webauthn-server-attestation/src/main/java/com/yubico/fido/metadata/FidoMetadataService.java

@@ -616,6 +616,7 @@ public TrustRootsResult findTrustRoots(
                 .collect(Collectors.toSet()))
         .certStore(certStore)
         .enableRevocationChecking(false)
+        .policyTreeValidator(policyNode -> true)
         .build();
   }
 }