used publicKeyCredentialCreationOptions user.id/userHandle violates the spec

[bodik]

FYI publicKeyCredentialCreationOptions implementation in

webauthndemo/src/main/java/com/google/webauthn/gaedemo/endpoints/Fido2RequestHandler.java

Line 62 in 6e5d6b1

user.getNickname() /* userName */, user.getEmail() /* userId */,

violates the specs at https://w3c.github.io/webauthn/#user-handle

The user handle MUST NOT contain personally identifying information about the user, such as a username or e-mail address

[cpiper]

Thanks, in change a805e9e
I have modified the logic to generate random data to fill the user id field. Since there is no support for an empty allowCredentials list on the server, this should be fine at this point.