§9.2 requires client extension output but appidExclude sets none

[emlun]

§9.2. Defining Extensions reads:

Any client extension that is processed by the client MUST return a client extension output value so that the WebAuthn Relying Party knows that the extension was honored by the client.

§10.2. FIDO AppID Exclusion Extension (appidExclude) reads:

Client extension output
None.

At least one of these should change, as the spec is internally inconsistent as is.

[selfissued]

We should always return true when this extension is used, as described in https://w3c.github.io/webauthn/#sctn-extension-specification.

[selfissued]

I will create a PR to make the extension conformant.