By looking at the random generated credentials, it seems the entropy is low.

In the source code [github], base_convert is used, the documentation write :

WARNING: base_convert() may lose precision on large numbers.

My PHP is little rusty, but should probably make a pull-request.

[github]: https://github.com/FriendsOfSymfony/FOSOAuthServerBundle/blo...