def METHOD_NAME(monkeypatch):
    fake_verified_authentication = VerifiedAuthentication(
        credential_id=b"a credential id",
        new_sign_count=69,
        credential_device_type="single_device",
        credential_backed_up=False,
    )
    mock_verify_authentication_response = pretend.call_recorder(
        lambda *a, **kw: fake_verified_authentication
    )
    monkeypatch.setattr(
        pywebauthn,
        "verify_authentication_response",
        mock_verify_authentication_response,
    )
    not_a_real_user = pretend.stub(
        webauthn=[
            pretend.stub(
                public_key=bytes_to_base64url(b"fake public key"), sign_count=68
            )
        ]
    )
    resp = webauthn.verify_assertion_response(
        (
            '{"id": "foo", "rawId": "foo", "response": '
            '{"authenticatorData": "foo", "clientDataJSON": "bar", '
            '"signature": "wutang"}}'
        ),
        challenge=b"not_a_real_challenge",
        user=not_a_real_user,
        origin="fake_origin",
        rp_id="fake_rp_id",
    )
    assert mock_verify_authentication_response.calls == [
        pretend.call(
            credential=AuthenticationCredential(
                id="foo",
                raw_id=b"~\x8a",
                response=AuthenticatorAssertionResponse(
                    client_data_json=b"m\xaa",
                    authenticator_data=b"~\x8a",
                    signature=b"\xc2\xebZ\x9e",
                    user_handle=None,
                ),
                type=PublicKeyCredentialType.PUBLIC_KEY,
            ),
            expected_challenge=b"bm90X2FfcmVhbF9jaGFsbGVuZ2U",
            expected_rp_id="fake_rp_id",
            expected_origin="fake_origin",
            credential_public_key=b"fake public key",
            credential_current_sign_count=68,
            require_user_verification=False,
        )
    ]
    assert resp == fake_verified_authentication