pke · Aug 2, 2026
diff --git a/README.md b/README.md
@@ -39,6 +39,11 @@ const { keyId, publicKey } = verifyAttestation({
   bundleIdentifier: String (e.g. org.example.AppAttestExample),
   teamIdentifier: String (e.g. V8H6LQ9448),
   allowDevelopmentEnvironment: boolean (should only be true on test environments),
+  authenticatorExtensions: { // optional; omitted for backward-compatible behavior
+    allowedValidationCategories: Number[],
+    allowedBundleVersions: String[],
+    required: boolean,
+  },
 });
 
 const { signCount } = verifyAssertion({
@@ -52,6 +57,33 @@ const { signCount } = verifyAssertion({
 
 ```
 
+### Authenticator extensions
+
+Apple can append `apple_validation_category_01` and
+`apple_bundle_version_01` to attestation authenticator data. To validate and
+require both extensions, configure an allowlist:
+
+```javascript
+const result = verifyAttestation({
+  // ...the required attestation parameters
+  authenticatorExtensions: {
+    allowedValidationCategories: [2, 4], // TestFlight and App Store
+    allowedBundleVersions: ["42"],
+    required: true,
+  },
+});
+
+console.log(result.validationCategory, result.bundleVersion);
+```
+
+When `authenticatorExtensions` is omitted, attestations without these
+extensions continue to verify as before. Extensions that are present are still
+type-checked. An allowlist rejects a present value outside the list, and
+`required: true` rejects attestations unless both supported extensions are
+present. See Apple's [attestation object validation
+guide](https://developer.apple.com/documentation/devicecheck/attestation-object-validation-guide)
+for the extension definitions and validation-category values.
+
 ## Detailed Usage
 
 The full example containing code for the app and for the backend you can find in this repository: https://github.com/uebelack/node-app-attest-example

diff --git a/package.json b/package.json
@@ -56,4 +56,4 @@
     "prettier": "^3.8.1",
     "typescript": "^5.9.3"
   }
-}
+}
diff --git a/src/verifyAttestation.js b/src/verifyAttestation.js
@@ -13,6 +13,165 @@ const APPATTESTPROD = Buffer.concat([
   Buffer.from([0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00]),
 ]).toString("hex");
 
+/**
+ * @typedef {object} AuthenticatorExtensionsPolicy
+ * @property {number[]} [allowedValidationCategories] Apple validation categories accepted by the server.
+ * @property {string[]} [allowedBundleVersions] Bundle versions accepted by the server.
+ * @property {boolean} [required] Require both supported Apple authenticator extensions.
+ */
+
+/**
+ * @typedef {object} AuthenticatorExtensionsResult
+ * @property {number} [validationCategory] The verified Apple validation category.
+ * @property {string} [bundleVersion] The verified app bundle version.
+ */
+
+/**
+ * @typedef {Record<string, any> & {authenticatorExtensions?: AuthenticatorExtensionsPolicy}} VerifyAttestationParams
+ */
+
+/**
+ * @typedef {object} VerifyAttestationResult
+ * @property {*} keyId
+ * @property {*} publicKey
+ * @property {*} receipt
+ * @property {string} environment
+ * @property {number} [validationCategory]
+ * @property {string} [bundleVersion]
+ */
+
+function validateAuthenticatorExtensionsPolicy(policy) {
+  const categories = policy?.allowedValidationCategories;
+  const versions = policy?.allowedBundleVersions;
+  const valid =
+    policy !== null &&
+    typeof policy === "object" &&
+    !Array.isArray(policy) &&
+    (policy.required === undefined || typeof policy.required === "boolean") &&
+    (categories === undefined ||
+      (Array.isArray(categories) &&
+        categories.every(
+          (category) =>
+            Number.isInteger(category) &&
+            category >= 0 &&
+            category <= 0xffffffff,
+        ))) &&
+    (versions === undefined ||
+      (Array.isArray(versions) &&
+        versions.every(
+          (version) => typeof version === "string" && version.length > 0,
+        )));
+
+  if (!valid) {
+    throw new Error("invalid authenticator extensions policy");
+  }
+}
+
+/**
+ * @param {Buffer} authData
+ * @param {AuthenticatorExtensionsPolicy} [authenticatorExtensions]
+ * @returns {AuthenticatorExtensionsResult}
+ */
+export function parseAuthenticatorExtensions(
+  authData,
+  authenticatorExtensions = {},
+) {
+  validateAuthenticatorExtensionsPolicy(authenticatorExtensions);
+  if (!Buffer.isBuffer(authData) || authData.length < 55) {
+    throw new Error("invalid authenticator data");
+  }
+
+  const credentialIdLength = authData.readUInt16BE(53);
+  const credentialDataOffset = 55 + credentialIdLength;
+  if (credentialDataOffset > authData.length) {
+    throw new Error("invalid authenticator data");
+  }
+
+  let decodedCredentialData;
+  try {
+    decodedCredentialData = cbor.decodeAllSync(
+      authData.subarray(credentialDataOffset),
+    );
+  } catch {
+    throw new Error("invalid authenticator data");
+  }
+
+  if (decodedCredentialData.length < 2) {
+    if (authenticatorExtensions.required) {
+      throw new Error("authenticator extensions are required");
+    }
+    return {};
+  }
+
+  if (decodedCredentialData.length !== 2) {
+    throw new Error("invalid authenticator extensions");
+  }
+
+  const extensions = decodedCredentialData[1];
+  const isPlainObject =
+    extensions !== null &&
+    typeof extensions === "object" &&
+    !Array.isArray(extensions) &&
+    !Buffer.isBuffer(extensions) &&
+    (Object.getPrototypeOf(extensions) === Object.prototype ||
+      Object.getPrototypeOf(extensions) === null);
+  if (!(extensions instanceof Map) && !isPlainObject) {
+    throw new Error("invalid authenticator extensions");
+  }
+  const getExtension = (name) =>
+    extensions instanceof Map ? extensions.get(name) : extensions?.[name];
+  const validationCategory = getExtension("apple_validation_category_01");
+  const bundleVersion = getExtension("apple_bundle_version_01");
+  const result = {};
+
+  if (validationCategory !== undefined) {
+    if (
+      !Buffer.isBuffer(validationCategory) ||
+      validationCategory.length !== 4
+    ) {
+      throw new Error("invalid apple_validation_category_01 extension");
+    }
+    result.validationCategory = validationCategory.readUInt32LE();
+    if (
+      authenticatorExtensions.allowedValidationCategories &&
+      !authenticatorExtensions.allowedValidationCategories.includes(
+        result.validationCategory,
+      )
+    ) {
+      throw new Error("validation category is not allowed");
+    }
+  }
+
+  if (bundleVersion !== undefined) {
+    if (typeof bundleVersion !== "string" || bundleVersion.length === 0) {
+      throw new Error("invalid apple_bundle_version_01 extension");
+    }
+    result.bundleVersion = bundleVersion;
+    if (
+      authenticatorExtensions.allowedBundleVersions &&
+      !authenticatorExtensions.allowedBundleVersions.includes(
+        result.bundleVersion,
+      )
+    ) {
+      throw new Error("bundle version is not allowed");
+    }
+  }
+
+  if (
+    authenticatorExtensions.required &&
+    (result.validationCategory === undefined ||
+      result.bundleVersion === undefined)
+  ) {
+    throw new Error("authenticator extensions are required");
+  }
+
+  return result;
+}
+
+/**
+ * @param {VerifyAttestationParams} params
+ * @returns {VerifyAttestationResult}
+ */
 function verifyAttestation(params) {
   const {
     attestation,
@@ -21,6 +180,7 @@ function verifyAttestation(params) {
     bundleIdentifier,
     teamIdentifier,
     allowDevelopmentEnvironment,
+    authenticatorExtensions,
   } = params;
 
   if (!bundleIdentifier) {
@@ -197,6 +357,11 @@ function verifyAttestation(params) {
     throw new Error("credentialId does not match");
   }
 
+  const verifiedExtensions = parseAuthenticatorExtensions(
+    authData,
+    authenticatorExtensions,
+  );
+
   return {
     keyId,
     publicKey: clientCertificate.publicKey.export({
@@ -205,6 +370,7 @@ function verifyAttestation(params) {
     }),
     receipt: decodedAttestation.attStmt.receipt,
     environment: aaguid === APPATTESTPROD ? "production" : "development",
+    ...verifiedExtensions,
   };
 }
 

diff --git a/test/fixtures/attestation-extensions.json b/test/fixtures/attestation-extensions.json
@@ -0,0 +1,10 @@
+{
+  "source": "https://developer.apple.com/documentation/devicecheck/attestation-object-validation-guide",
+  "attestation": "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",
+  "challenge": "example_server_challenge",
+  "keyId": "zgSY9YSD+7TaDXssY6WlOPVS1K3Lmk+pFhlcSWE+ZV0=",
+  "bundleIdentifier": "com.example.myapp",
+  "teamIdentifier": "1234567890",
+  "validationCategory": 1,
+  "bundleVersion": "1"
+}
-Original file line number
+Diff line change
@@ Expand Up / @@ -56,4 +56,4 @@ @@
         "prettier": "^3.8.1",
         "typescript": "^5.9.3"
       }
-    }
+    }