In #29, we refactored PasskeysControllerConcern.verify_passkey_challenge to move the integrity checks into their own before action: f1400cb (discussion where the idea came from: #29 (comment))
For consistency, we should have a similar pattern for RegistrationsControllerConcern.verify_passkey_registration_challenge. This will also involve updating the tests themselves to reflect the changes. See:
@johalloran01 this might be a good issue to tackle as well, if you want to take it 💪