vijinho / f3-cms

        }

        // code expired!

        if (time() > strtotime($tokensMapper->expires)) {

            $this->failure('authentication_error', "The token expired.", 401);

            $this->setOAuthError('invalid_grant');

            return;

        }

        // now set a token into the the same token object

        $tokensMapper->setUUID('token');

                return false;

            }

            // check token is not out-of-date

            if (time() > strtotime($tokensMapper->expires)) {

                $this->failure('authentication_error', "The token expired!", 401);

                $this->setOAuthError('invalid_grant');

                return false;

            }

            // if token found load the user for the token

            $usersModel->getUserByUUID($tokensMapper->users_uuid);

        // get the scopes, this might have come from the token auth

        $scope = $f3->get('REQUEST.scope');

        $scopes = empty($scope) ? [] : preg_split("/[\s,]+/", $scope);

        if (null !== $tokensMapper->uuid && time() > strtotime($tokensMapper->expires)) {

            $this->failure('authentication_error', "The token expired!", 401);

            $this->setOAuthError('invalid_grant');

            return false;

        }

        $userAuthenticated = (is_array($user) || is_array($app));

        if (!$userAuthenticated) {