In the `src/auth/verify-challenge-signature.js` file, wrap the call to ``` return verifier.verify(nonce, value, authKey); ```` in a try/catch block e throw a new error with the message "Invalid signature" if it fails.