Studio CLI: Validate access token before starting command operation

cli/lib/api.ts

@@ -129,3 +129,12 @@ export async function deleteSnapshot( atomicSiteId: number, token: string ): Pro
 		throw new LoggerError( __( 'Failed to delete preview site' ), error );
 	}
 }
+
+export async function validateAccessToken( token: string ): Promise< void > {
+	const wpcom = new WPCOM( token );
+	try {
+		await wpcom.req.get( '/me', { fields: 'ID' } );
+	} catch ( error ) {
+		throw new LoggerError( __( 'Invalid authentication token' ), error );
+	}
+}

cli/lib/appdata.ts

@@ -8,6 +8,7 @@ import { getAuthenticationUrl } from 'common/lib/oauth';
 import { snapshotSchema } from 'common/types/snapshot';
 import { StatsGroup, StatsMetric } from 'common/types/stats';
 import { z } from 'zod';
+import { validateAccessToken } from 'cli/lib/api';
 import { LoggerError } from 'cli/logger';
 
 const siteSchema = z
@@ -117,6 +118,8 @@ export async function getAuthToken(): Promise< NonNullable< UserData[ 'authToken
 			throw new Error( 'Authentication required' );
 		}
 
+		await validateAccessToken( authToken.accessToken );
+
 		return authToken;
 	} catch ( error ) {
 		const authUrl = getAuthenticationUrl();

cli/lib/tests/appdata.test.ts

@@ -21,6 +21,10 @@ jest.mock( 'crypto', () => ( {
 	randomUUID: jest.fn().mockReturnValue( 'mock-uuid-1234' ),
 } ) );
 
+jest.mock( 'cli/lib/api', () => ( {
+	validateAccessToken: jest.fn().mockResolvedValue( undefined ),
+} ) );
+
 describe( 'Appdata Module', () => {
 	const mockHomeDir = '/mock/home';
 	const mockSiteFolderName = 'folder';

cli/lib/tests/snapshots.test.ts

@@ -28,6 +28,10 @@ jest.mock( 'lockfile', () => ( {
 	unlock: jest.fn().mockImplementation( ( path, callback ) => callback( null ) ),
 } ) );
 
+jest.mock( 'cli/lib/api', () => ( {
+	validateAccessToken: jest.fn().mockResolvedValue( undefined ),
+} ) );
+
 describe( 'Snapshots Module', () => {
 	const mockHomeDir = '/mock/home';
 	const mockSiteFolderName = 'folder';