Remove NoneAttestationAsyncVerififer from verifier list

Adding NoneAttestationAsyncVerififer here causes attestation check bypass

Author: ynojima

vertx-auth-webauthn4j/src/main/java/io/vertx/ext/auth/webauthn4j/impl/WebAuthn4JImpl.java

@@ -166,7 +166,6 @@ public WebAuthn4JImpl(Vertx vertx, WebAuthn4JOptions options) {
 
     	webAuthnManager = new WebAuthnAsyncManager(
     			Arrays.asList(
-    					new NoneAttestationStatementAsyncVerifier(),
     					new FIDOU2FAttestationStatementAsyncVerifier(),
     					new PackedAttestationStatementAsyncVerifier(),
     					new TPMAttestationStatementAsyncVerifier(),

vertx-auth-webauthn4j/src/test/java/io/vertx/tests/attestation/AttestationTest.java

@@ -114,6 +114,39 @@ public void testNoneAttestation(TestContext should) {
       });
   }
 
+  @Test
+  public void testNoneAttestationShouldFailWhenDirectAttestationIsRequested(TestContext should) {
+    final Async test = should.async();
+
+    WebAuthn4J webAuthN = WebAuthn4J.create(
+        rule.vertx(),
+        new WebAuthn4JOptions()
+          .setRelyingParty(new RelyingParty().setName("FIDO Examples Corporation"))
+          .setAttestation(Attestation.DIRECT)
+      )
+      .credentialStorage(database);
+
+    JsonObject packedFullAttestationWebAuthnSample = new JsonObject()
+      .put("rawId", "AAii3V6sGoaozW7TbNaYlJaJ5br8TrBfRXnofZO6l2suc3a5tt_XFuFkFA_5eabU80S1PW0m4IZ79BS2kQO7Zcuy2vf0ESg18GTLG1mo5YSkIdqL2J44egt-6rcj7NedSEwxa_uuxUYBtHNnSQqDmtoUAfM9LSWLl65BjKVZNGUp9ao33mMSdVfQQ0bHze69JVQvLBf8OTiZUqJsOuKmpqUc")
+      .put("id", "AAii3V6sGoaozW7TbNaYlJaJ5br8TrBfRXnofZO6l2suc3a5tt_XFuFkFA_5eabU80S1PW0m4IZ79BS2kQO7Zcuy2vf0ESg18GTLG1mo5YSkIdqL2J44egt-6rcj7NedSEwxa_uuxUYBtHNnSQqDmtoUAfM9LSWLl65BjKVZNGUp9ao33mMSdVfQQ0bHze69JVQvLBf8OTiZUqJsOuKmpqUc")
+      .put("type", "public-key")
+      .put("response", new JsonObject()
+        .put("clientDataJSON", "eyJjaGFsbGVuZ2UiOiIzM0VIYXYtaloxdjlxd0g3ODNhVS1qMEFSeDZyNW8tWUhoLXdkN0M2alBiZDdXaDZ5dGJJWm9zSUlBQ2Vod2Y5LXM2aFhoeVNITy1ISFVqRXdaUzI5dyIsImNsaWVudEV4dGVuc2lvbnMiOnt9LCJoYXNoQWxnb3JpdGhtIjoiU0hBLTI1NiIsIm9yaWdpbiI6Imh0dHBzOi8vbG9jYWxob3N0Ojg0NDMiLCJ0eXBlIjoid2ViYXV0aG4uY3JlYXRlIn0=")
+        .put("attestationObject", "o2NmbXRkbm9uZWdhdHRTdG10oGhhdXRoRGF0YVkBJkmWDeWIDoxodDQXD2R2YFuP5K65ooYyx5lc87qDHZdjQQAAAAAAAAAAAAAAAAAAAAAAAAAAAKIACKLdXqwahqjNbtNs1piUlonluvxOsF9Feeh9k7qXay5zdrm239cW4WQUD_l5ptTzRLU9bSbghnv0FLaRA7tly7La9_QRKDXwZMsbWajlhKQh2ovYnjh6C37qtyPs151ITDFr-67FRgG0c2dJCoOa2hQB8z0tJYuXrkGMpVk0ZSn1qjfeYxJ1V9BDRsfN7r0lVC8sF_w5OJlSomw64qampRylAQIDJiABIVgguxHN3W6ehp0VWXKaMNie1J82MVJCFZYScau74o17cx8iWCDb1jkTLi7lYZZbgwUwpqAk8QmIiPMTVQUVkhGEyGrKww=="));
+
+    webAuthN.authenticate(
+        new WebAuthn4JCredentials()
+          .setUsername("paulo")
+          .setOrigin("https://localhost:8443")
+          .setWebauthn(packedFullAttestationWebAuthnSample)
+          .setChallenge("33EHav-jZ1v9qwH783aU-j0ARx6r5o-YHh-wd7C6jPbd7Wh6ytbIZosIIACehwf9-s6hXhySHO-HHUjEwZS29w"))
+      .onFailure(err->{
+        test.complete();
+      })
+      .onSuccess(user -> should.fail());
+  }
+
+
   @Test
   public void testNoneAttestationWithNonZeroAAGUID(TestContext should) {
     final Async test = should.async();