Fix decoding Attestation auth data with extentions (#243)

Author: RobHarveyDev

cdk/custom-auth/fido2-credentials-api.ts

@@ -26,7 +26,7 @@ import {
   UpdateCommand,
   PutCommand,
 } from "@aws-sdk/lib-dynamodb";
-import { decodeFirstSync } from "cbor";
+import { decodeAllSync } from "cbor";
 import {
   determineUserHandle,
   logger,
@@ -870,8 +870,9 @@ function parseBody(event: { body?: string | null; isBase64Encoded: boolean }) {
 
 function cborDecode(b: Buffer, name: string) {
   try {
+    const decoded = decodeAllSync(b);
     // eslint-disable-next-line @typescript-eslint/no-unsafe-call
-    return decodeFirstSync(b) as unknown;
+    return decoded[0] as unknown;
   } catch (err) {
     logger.error(err);
     throw new UserFacingError(`Invalid ${name}`);