Seems due to recent node-cbor module update in this project. And below is related information. https://github.com/hildjj/node-cbor/issues/118#issuecomment-761741260 This will cause authenticator data parsing failed if there is any extra extension data.