Remove UV to UP downgrade check (#103)

as per spec, UP and UV checks do not make reference to the original registration level, so this custom check is overdoing it.
Since it also creates issues with some authenticators (Google Passkey manager at least), better to remove the check.

Author: happydude

src/Controller/AuthProcess.php

@@ -163,19 +163,6 @@ public function main(Request $request): Response
             $debugEnabled,
         );
 
-        /** Custom check: if the token was initially registered with UV, but now
-         * authenticates only UP, we don't allow this downgrade.
-         *
-         * This is not typically allowed by authenticator implementations anyway
-         * (they typically require a full reset of the key to remove UV
-         * protections) but to be safe: find out and tell user to re-enroll with
-         * the lower security level. (level upgrades are of course OK.)
-         */
-        if ($oneToken[5] > $authObject->getPresenceLevel()) {
-            // phpcs:ignore Generic.Files.LineLength.TooLong
-            throw new Exception("Token was initially registered with higher identification guarantees than now authenticated with (was: " . $oneToken[5] . " now " . $authObject->getPresenceLevel() . "!");
-        }
-
         // no matter what: if we are passwordless it MUST be presence-verified
         if (
             $state['FIDO2PasswordlessAuthMode'] === true &&