fingerprint-pro-server-api-sdk 3.0.0__tar.gz → 4.1.0.dev1__tar.gz

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fingerprint-pro-server-api-sdk
-Version: 3.0.0
+Version: 4.1.0.dev1
 Summary: Fingerprint Pro Server API allows you to get information about visitors and about individual events in a server environment. It can be used for data exports, decision-making, and data analysis scenarios. Server API is intended for server-side usage, it's not intended to be used from the client side, whether it's a browser or a mobile device. 
 Home-page: https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk
 Author: Fingerprint
@@ -11,12 +11,7 @@ Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 2
 Classifier: Programming Language :: Python
-Classifier: Programming Language :: Python :: 2.7
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.4
-Classifier: Programming Language :: Python :: 3.5
 Classifier: Programming Language :: Python :: 3.6
 Classifier: Programming Language :: Python :: 3.7
 Classifier: Programming Language :: Python :: 3.8
@@ -65,15 +60,14 @@ The Fingerprint Server Python SDK is an easy way to interact with the Fingerprin
 This Python package is automatically generated by the [Swagger Codegen](https://github.com/swagger-api/swagger-codegen) project:
 
 - API version: 3
-- Package version: 3.0.0
+- Package version: 4.1.0.dev1
 - Build package: io.swagger.codegen.v3.generators.python.PythonClientCodegen
 
 ## Requirements
 
 The following Python versions are supported:
 
-- Python 2.7
-- Python 3.4+
+- Python >= 3.6
 
 ## Installation & Usage
 ### pip install
@@ -172,6 +166,36 @@ except ApiException as e:
     print("Exception when calling DefaultApi->get_event: %s\n" % e)
 ```
 
+## Sealed results
+
+This SDK provides utility methods for decoding [sealed results](https://dev.fingerprint.com/docs/sealed-client-results).
+```python
+import base64
+import os
+
+from dotenv import load_dotenv
+
+from fingerprint_pro_server_api_sdk import EventResponse
+from fingerprint_pro_server_api_sdk.sealed import unseal_events_response, DecryptionKey, DecryptionAlgorithm
+
+load_dotenv()
+
+sealed_result = base64.b64decode(os.environ["BASE64_SEALED_RESULT"])
+key = base64.b64decode(os.environ["BASE64_KEY"])
+
+try:
+    events_response: EventResponse = unseal_events_response(sealed_result, [DecryptionKey(key, DecryptionAlgorithm['Aes256Gcm'])])
+    print("\n\n\nEvent response: \n", events_response.products)
+except Exception as e:
+    print("Exception when calling unsealing events response: %s\n" % e)
+    exit(1)
+
+print("Unseal successful!")
+
+exit(0)
+```
+To learn more, refer to example located in [sealed_results_example.py](sealed_results_example.py).
+
 ## Documentation for API Endpoints
 
 All URIs are relative to *https://api.fpjs.io*
@@ -278,6 +302,11 @@ Class | Method | HTTP request | Description
 - **Location**: URL query string
 
 
+## Documentation for sealed results
+
+- [SealedResults](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/blob/main/docs/SealedResults.md)
+- [DecryptionKey](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/blob/main/docs/DecryptionKey.md)
+
 ## Support
 
 To report problems, ask questions or provide feedback, please use [Issues](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/issues).

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/README.md

@@ -40,15 +40,14 @@ The Fingerprint Server Python SDK is an easy way to interact with the Fingerprin
 This Python package is automatically generated by the [Swagger Codegen](https://github.com/swagger-api/swagger-codegen) project:
 
 - API version: 3
-- Package version: 3.0.0
+- Package version: 4.1.0.dev1
 - Build package: io.swagger.codegen.v3.generators.python.PythonClientCodegen
 
 ## Requirements
 
 The following Python versions are supported:
 
-- Python 2.7
-- Python 3.4+
+- Python >= 3.6
 
 ## Installation & Usage
 ### pip install
@@ -147,6 +146,36 @@ except ApiException as e:
     print("Exception when calling DefaultApi->get_event: %s\n" % e)
 ```
 
+## Sealed results
+
+This SDK provides utility methods for decoding [sealed results](https://dev.fingerprint.com/docs/sealed-client-results).
+```python
+import base64
+import os
+
+from dotenv import load_dotenv
+
+from fingerprint_pro_server_api_sdk import EventResponse
+from fingerprint_pro_server_api_sdk.sealed import unseal_events_response, DecryptionKey, DecryptionAlgorithm
+
+load_dotenv()
+
+sealed_result = base64.b64decode(os.environ["BASE64_SEALED_RESULT"])
+key = base64.b64decode(os.environ["BASE64_KEY"])
+
+try:
+    events_response: EventResponse = unseal_events_response(sealed_result, [DecryptionKey(key, DecryptionAlgorithm['Aes256Gcm'])])
+    print("\n\n\nEvent response: \n", events_response.products)
+except Exception as e:
+    print("Exception when calling unsealing events response: %s\n" % e)
+    exit(1)
+
+print("Unseal successful!")
+
+exit(0)
+```
+To learn more, refer to example located in [sealed_results_example.py](sealed_results_example.py).
+
 ## Documentation for API Endpoints
 
 All URIs are relative to *https://api.fpjs.io*
@@ -253,6 +282,11 @@ Class | Method | HTTP request | Description
 - **Location**: URL query string
 
 
+## Documentation for sealed results
+
+- [SealedResults](docs/SealedResults.md)
+- [DecryptionKey](docs/DecryptionKey.md)
+
 ## Support
 
 To report problems, ask questions or provide feedback, please use [Issues](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/issues).

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/fingerprint_pro_server_api_sdk/api/fingerprint_api.py

@@ -99,7 +99,7 @@ class FingerprintApi(object):
             path_params['request_id'] = params['request_id']  # noqa: E501
 
         query_params = []
-        query_params.append(('ii', 'fingerprint-pro-server-python-sdk/3.0.0'))
+        query_params.append(('ii', 'fingerprint-pro-server-python-sdk/4.1.0.dev1'))
 
         header_params = {}
 
@@ -214,7 +214,7 @@ class FingerprintApi(object):
             path_params['visitor_id'] = params['visitor_id']  # noqa: E501
 
         query_params = []
-        query_params.append(('ii', 'fingerprint-pro-server-python-sdk/3.0.0'))
+        query_params.append(('ii', 'fingerprint-pro-server-python-sdk/4.1.0.dev1'))
         if 'request_id' in params:
             query_params.append(('request_id', params['request_id']))  # noqa: E501
         if 'linked_id' in params:

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/fingerprint_pro_server_api_sdk/api_client.py

@@ -79,7 +79,7 @@ class ApiClient(object):
             self.default_headers[header_name] = header_value
         self.cookie = cookie
         # Set default User-Agent.
-        self.user_agent = 'Swagger-Codegen/3.0.0/python'
+        self.user_agent = 'Swagger-Codegen/4.1.0.dev1/python'
 
     def __del__(self):
         self.pool.close()

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/fingerprint_pro_server_api_sdk/configuration.py

@@ -263,5 +263,5 @@ class Configuration(object):
                "OS: {env}\n"\
                "Python Version: {pyversion}\n"\
                "Version of the API: 3\n"\
-               "SDK Package Version: 3.0.0".\
+               "SDK Package Version: 4.1.0.dev1".\
                format(env=sys.platform, pyversion=sys.version)

fingerprint-pro-server-api-sdk-4.1.0.dev1/fingerprint_pro_server_api_sdk/sealed.py

@@ -0,0 +1,86 @@
+import json
+from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+from cryptography.hazmat.backends import default_backend
+import zlib
+
+from fingerprint_pro_server_api_sdk.models.event_response import EventResponse
+
+SEALED_HEADER = bytes([0x9e, 0x85, 0xdc, 0xed])
+DecryptionAlgorithm = {
+    'Aes256Gcm': 'aes-256-gcm',
+}
+
+
+class DecryptionKey:
+    def __init__(self, key, algorithm):
+        self.key = key
+        self.algorithm = algorithm
+
+
+class UnsealError(Exception):
+    exception: Exception
+    key: DecryptionKey
+
+    def __init__(self, exception, key):
+        self.exception = exception
+        self.key = key
+
+
+class UnsealAggregateError(Exception):
+    def __init__(self, errors):
+        self.errors = errors
+        super().__init__("Unable to decrypt sealed data")
+
+
+def parse_events_response(unsealed):
+    json_data = json.loads(unsealed)
+
+    if 'products' not in json_data:
+        raise ValueError('Sealed data is not valid events response')
+
+    return EventResponse(json_data['products'])
+
+
+def unseal_events_response(sealed_data, decryption_keys):
+    unsealed = unseal(sealed_data, decryption_keys)
+    return parse_events_response(unsealed)
+
+
+def unseal(sealed_data, decryption_keys):
+    if sealed_data[:len(SEALED_HEADER)].hex() != SEALED_HEADER.hex():
+        raise ValueError('Invalid sealed data header')
+
+    errors = []
+    for decryption_key in decryption_keys:
+        if decryption_key.algorithm == DecryptionAlgorithm['Aes256Gcm']:
+            try:
+                return unseal_aes256gcm(sealed_data, decryption_key.key)
+            except Exception as e:
+                errors.append(UnsealError(e, decryption_key))
+                continue
+        else:
+            raise ValueError(f"Unsupported decryption algorithm: {decryption_key.algorithm}")
+
+    raise UnsealAggregateError(errors)
+
+
+def unseal_aes256gcm(sealed_data, decryption_key):
+    nonce_length = 12
+    nonce = sealed_data[len(SEALED_HEADER):len(SEALED_HEADER) + nonce_length]
+
+    auth_tag_length = 16
+    auth_tag = sealed_data[-auth_tag_length:]
+
+    ciphertext = sealed_data[len(SEALED_HEADER) + nonce_length:-auth_tag_length]
+
+    decipher = Cipher(
+        algorithms.AES(decryption_key),
+        modes.GCM(nonce, auth_tag),
+        backend=default_backend()
+    ).decryptor()
+
+    compressed = decipher.update(ciphertext) + decipher.finalize()
+
+    payload = zlib.decompress(compressed, -zlib.MAX_WBITS)
+
+    return payload.decode('utf-8')

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/fingerprint_pro_server_api_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fingerprint-pro-server-api-sdk
-Version: 3.0.0
+Version: 4.1.0.dev1
 Summary: Fingerprint Pro Server API allows you to get information about visitors and about individual events in a server environment. It can be used for data exports, decision-making, and data analysis scenarios. Server API is intended for server-side usage, it's not intended to be used from the client side, whether it's a browser or a mobile device. 
 Home-page: https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk
 Author: Fingerprint
@@ -11,12 +11,7 @@ Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 2
 Classifier: Programming Language :: Python
-Classifier: Programming Language :: Python :: 2.7
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.4
-Classifier: Programming Language :: Python :: 3.5
 Classifier: Programming Language :: Python :: 3.6
 Classifier: Programming Language :: Python :: 3.7
 Classifier: Programming Language :: Python :: 3.8
@@ -65,15 +60,14 @@ The Fingerprint Server Python SDK is an easy way to interact with the Fingerprin
 This Python package is automatically generated by the [Swagger Codegen](https://github.com/swagger-api/swagger-codegen) project:
 
 - API version: 3
-- Package version: 3.0.0
+- Package version: 4.1.0.dev1
 - Build package: io.swagger.codegen.v3.generators.python.PythonClientCodegen
 
 ## Requirements
 
 The following Python versions are supported:
 
-- Python 2.7
-- Python 3.4+
+- Python >= 3.6
 
 ## Installation & Usage
 ### pip install
@@ -172,6 +166,36 @@ except ApiException as e:
     print("Exception when calling DefaultApi->get_event: %s\n" % e)
 ```
 
+## Sealed results
+
+This SDK provides utility methods for decoding [sealed results](https://dev.fingerprint.com/docs/sealed-client-results).
+```python
+import base64
+import os
+
+from dotenv import load_dotenv
+
+from fingerprint_pro_server_api_sdk import EventResponse
+from fingerprint_pro_server_api_sdk.sealed import unseal_events_response, DecryptionKey, DecryptionAlgorithm
+
+load_dotenv()
+
+sealed_result = base64.b64decode(os.environ["BASE64_SEALED_RESULT"])
+key = base64.b64decode(os.environ["BASE64_KEY"])
+
+try:
+    events_response: EventResponse = unseal_events_response(sealed_result, [DecryptionKey(key, DecryptionAlgorithm['Aes256Gcm'])])
+    print("\n\n\nEvent response: \n", events_response.products)
+except Exception as e:
+    print("Exception when calling unsealing events response: %s\n" % e)
+    exit(1)
+
+print("Unseal successful!")
+
+exit(0)
+```
+To learn more, refer to example located in [sealed_results_example.py](sealed_results_example.py).
+
 ## Documentation for API Endpoints
 
 All URIs are relative to *https://api.fpjs.io*
@@ -278,6 +302,11 @@ Class | Method | HTTP request | Description
 - **Location**: URL query string
 
 
+## Documentation for sealed results
+
+- [SealedResults](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/blob/main/docs/SealedResults.md)
+- [DecryptionKey](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/blob/main/docs/DecryptionKey.md)
+
 ## Support
 
 To report problems, ask questions or provide feedback, please use [Issues](https://github.com/fingerprintjs/fingerprint-pro-server-api-python-sdk/issues).

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/fingerprint_pro_server_api_sdk.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ fingerprint_pro_server_api_sdk/configuration.py
 fingerprint_pro_server_api_sdk/dummy_pool.py
 fingerprint_pro_server_api_sdk/extend_exception.py
 fingerprint_pro_server_api_sdk/rest.py
+fingerprint_pro_server_api_sdk/sealed.py
 fingerprint_pro_server_api_sdk.egg-info/PKG-INFO
 fingerprint_pro_server_api_sdk.egg-info/SOURCES.txt
 fingerprint_pro_server_api_sdk.egg-info/dependency_links.txt
@@ -95,4 +96,5 @@ fingerprint_pro_server_api_sdk/models/webhook_signal_response_tor.py
 fingerprint_pro_server_api_sdk/models/webhook_signal_response_virtual_machine.py
 fingerprint_pro_server_api_sdk/models/webhook_visit.py
 test/__init__.py
-test/test_fingerprint_api.py
+test/test_fingerprint_api.py
+test/test_sealed.py

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/setup.cfg

@@ -1,5 +1,5 @@
 [metadata]
-version = 3.0.0
+version = 4.1.0.dev1
 
 [egg_info]
 tag_build = 

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/setup.py

@@ -56,12 +56,7 @@ setup(
         'Development Status :: 5 - Production/Stable',
         'Intended Audience :: Developers',
         'License :: OSI Approved :: MIT License',
-        'Programming Language :: Python :: 2',
         'Programming Language :: Python',
-        'Programming Language :: Python :: 2.7',
-        'Programming Language :: Python :: 3',
-        'Programming Language :: Python :: 3.4',
-        'Programming Language :: Python :: 3.5',
         'Programming Language :: Python :: 3.6',
         'Programming Language :: Python :: 3.7',
         'Programming Language :: Python :: 3.8',

{fingerprint-pro-server-api-sdk-3.0.0 → fingerprint-pro-server-api-sdk-4.1.0.dev1}/test/test_fingerprint_api.py

@@ -24,7 +24,7 @@ from fingerprint_pro_server_api_sdk.rest import KnownApiException
 
 API_KEY = 'private_key'
 
-VERSION = '3.0.0'
+VERSION = '4.1.0.dev1'
 
 
 class MockPoolManager(object):

fingerprint-pro-server-api-sdk-4.1.0.dev1/test/test_sealed.py

@@ -0,0 +1,108 @@
+import base64
+import io
+import json
+import unittest
+
+from fingerprint_pro_server_api_sdk import EventResponse
+from fingerprint_pro_server_api_sdk.sealed import DecryptionAlgorithm, DecryptionKey, unseal_events_response, \
+    UnsealError, UnsealAggregateError
+
+
+class TestSealed(unittest.TestCase):
+    valid_key = base64.b64decode('p2PA7MGy5tx56cnyJaFZMr96BCFwZeHjZV2EqMvTq53=')
+    invalid_key = base64.b64decode('a2PA7MGy5tx56cnyJaFZMr96BCFwZeHjZV2EqMvTq53=')
+
+    def test_unseal_aes256gcm(self):
+        with io.open("./test/mocks/sealed_result.json", 'r', encoding='utf-8') as f:
+            expected_result = EventResponse(json.load(f)['products'])
+
+            sealed_data = base64.b64decode(
+                'noXc7SXO+mqeAGrvBMgObi/S0fXTpP3zupk8qFqsO/1zdtWCD169iLA3VkkZh9ICHpZ0oWRzqG0M9/TnCeKFohgBLqDp6O0zEfXOv6i5q++aucItznQdLwrKLP+O0blfb4dWVI8/aSbd4ELAZuJJxj9bCoVZ1vk+ShbUXCRZTD30OIEAr3eiG9aw00y1UZIqMgX6CkFlU9L9OnKLsNsyomPIaRHTmgVTI5kNhrnVNyNsnzt9rY7fUD52DQxJILVPrUJ1Q+qW7VyNslzGYBPG0DyYlKbRAomKJDQIkdj/Uwa6bhSTq4XYNVvbk5AJ/dGwvsVdOnkMT2Ipd67KwbKfw5bqQj/cw6bj8Cp2FD4Dy4Ud4daBpPRsCyxBM2jOjVz1B/lAyrOp8BweXOXYugwdPyEn38MBZ5oL4D38jIwR/QiVnMHpERh93jtgwh9Abza6i4/zZaDAbPhtZLXSM5ztdctv8bAb63CppLU541Kf4OaLO3QLvfLRXK2n8bwEwzVAqQ22dyzt6/vPiRbZ5akh8JB6QFXG0QJF9DejsIspKF3JvOKjG2edmC9o+GfL3hwDBiihYXCGY9lElZICAdt+7rZm5UxMx7STrVKy81xcvfaIp1BwGh/HyMsJnkE8IczzRFpLlHGYuNDxdLoBjiifrmHvOCUDcV8UvhSV+UAZtAVejdNGo5G/bz0NF21HUO4pVRPu6RqZIs/aX4hlm6iO/0Ru00ct8pfadUIgRcephTuFC2fHyZxNBC6NApRtLSNLfzYTTo/uSjgcu6rLWiNo5G7yfrM45RXjalFEFzk75Z/fu9lCJJa5uLFgDNKlU+IaFjArfXJCll3apbZp4/LNKiU35ZlB7ZmjDTrji1wLep8iRVVEGht/DW00MTok7Zn7Fv+MlxgWmbZB3BuezwTmXb/fNw==')
+
+            result = unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+            self.assertEqual(result, expected_result)
+
+    def test_unseal_invalid_header(self):
+        sealed_data = base64.b64decode(
+            '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')
+
+        with self.assertRaisesRegex(Exception, "Invalid sealed data header"):
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+    def test_unseal_invalid_algorithm(self):
+        sealed_data = base64.b64decode(
+            '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')
+
+        with self.assertRaisesRegex(Exception, "Unsupported decryption algorithm: invalid"):
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, 'invalid'),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+    def test_unseal_invalid_data(self):
+        sealed_data = base64.b64decode(
+            # "{\"invalid\":true}"
+            'noXc7VOpBstjjcavDKSKr4HTavt4mdq8h6NC32T0hUtw9S0jXT8lPjZiWL8SyHxmrF3uTGqO+g==')
+
+        with self.assertRaisesRegex(Exception, "Sealed data is not valid events response"):
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+    def test_unseal_not_compressed_data(self):
+        sealed_data = base64.b64decode(
+            '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')
+
+        with self.assertRaisesRegex(Exception, "Unable to decrypt sealed data") as context:
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+        exception: UnsealAggregateError = context.exception
+        error: UnsealError = exception.errors[1]
+
+        self.assertEqual(str(error.exception), 'Error -3 while decompressing data: invalid distance too far back')
+
+    def test_unseal_all_keys_invalid(self):
+        sealed_data = base64.b64decode(
+            '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')
+
+        with self.assertRaisesRegex(Exception, 'Unable to decrypt sealed data'):
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+    def test_unseal_empty_data(self):
+        sealed_data = bytearray(b'')
+
+        with self.assertRaisesRegex(Exception, 'Invalid sealed data header'):
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+    def test_unseal_invalid_nonce(self):
+        sealed_data = bytes([0x9E, 0x85, 0xDC, 0xED, 0xAA, 0xBB, 0xCC])
+
+        with self.assertRaisesRegex(Exception, 'Unable to decrypt sealed data') as context:
+            unseal_events_response(sealed_data, [
+                DecryptionKey(self.invalid_key, DecryptionAlgorithm['Aes256Gcm']),
+                DecryptionKey(self.valid_key, DecryptionAlgorithm['Aes256Gcm']),
+            ])
+
+        exception: UnsealAggregateError = context.exception
+        error: UnsealError = exception.errors[1]
+
+        self.assertEqual(str(error.exception), 'initialization_vector must be between 8 and 128 bytes (64 and 1024 bits).')
+
+