FriendsOfSymfony/oauth2-php — pull request #16 by cjunge (2012-12-18 03:13:49+00:00)
Title: Tweaks to OAuth2::genAccessToken to improve security

Changes to genAccessToken() to use /dev/urandom first, then fallback to openssl_random_pseudo_bytes with mt_rand as last resort. Ref: http://blog.ircmaxell.com/2012/12/seven-ways-to-screw-up-bcrypt.html