class WebAuthn::AttestationStatement::AndroidKey

def valid?(authenticator_data, client_data_hash)
  valid_signature?(authenticator_data, client_data_hash) &&
    matching_public_key?(authenticator_data) &&
    valid_attestation_challenge?(client_data_hash) &&
    all_applications_fields_not_set? &&
    valid_authorization_list_origin? &&
    valid_authorization_list_purpose? &&
    trustworthy?(aaguid: authenticator_data.aaguid) &&
    [attestation_type, attestation_trust_path]
end