SSO protection

app.py

@@ -20,13 +20,11 @@ def get_release_notes(
     ignore_dependabot: bool,
     ignore_direct: bool,
 ):
-    date = get_tag_commit_date(token, repo, tag)
-
-    if date is None:
-        return "The token was invalid or didn't have the necessary scopes."
-
-    commits = get_commits(token, repo, branch, date)
-
+    try:
+        date = get_tag_commit_date(token, repo, tag)
+        commits = get_commits(token, repo, branch, date)
+    except ValueError as e:
+        return str(e)
 
     result = ""
     contributors = {}

graphql_calls.py

@@ -47,9 +47,16 @@ def get_tag_commit_date(token, repository, tag):
     response = call_with_query(query, token)
 
     try:
-        committed_date = response['data']['repository']['object']['committedDate']
-    except KeyError:
-        committed_date = None
+        repository = response['data']['repository']['object']
+
+        if repository is None:
+            if 'errors' in response:
+                raise ValueError(response['errors'][0]['message'])
+            raise ValueError('Invalid tag. Does this tag exist?')
+
+        committed_date = repository['committedDate']
+    except (KeyError, TypeError):
+        raise ValueError('Invalid token. Does your token have the valid permissions?')
 
     return committed_date
 
@@ -93,6 +100,9 @@ def get_commits(token, repository, branch, since):
         """
         result = call_with_query(query, token)
 
+        if 'data' not in result:
+            raise ValueError(result['errors'][0]['message'])
+
         if result['data']['repository']['object'] is None:
             raise ValueError("Either the tag or the branch were incorrect.")