fix: send either EGLNOPERMISSION or EINVALIDGLTOKEN but not both

Author: pvdlg

lib/verify.js

@@ -53,6 +53,10 @@ module.exports = async (pluginConfig, context) => {
         json: true,
         headers: {'Private-Token': gitlabToken},
       }));
+
+      if (!((projectAccess && projectAccess.access_level >= 30) || (groupAccess && groupAccess.access_level >= 30))) {
+        errors.push(getError('EGLNOPERMISSION', {repoId}));
+      }
     } catch (error) {
       if (error.statusCode === 401) {
         errors.push(getError('EINVALIDGLTOKEN', {repoId}));
@@ -62,10 +66,6 @@ module.exports = async (pluginConfig, context) => {
         throw error;
       }
     }
-
-    if (!((projectAccess && projectAccess.access_level >= 30) || (groupAccess && groupAccess.access_level >= 30))) {
-      errors.push(getError('EGLNOPERMISSION', {repoId}));
-    }
   } else {
     errors.push(getError('ENOGLTOKEN', {repoId}));
   }