Isn't fb_sig_friends supposed to be there?

According to the docs, Facebook is supposed to send both fb_sig_canvas_user and fb_sig_friends for a canvas application. Sadly, I only get fb_sig_canvas_user and NOT fb_sig_friends. Is there anything I have to do to get this parameter?

Or开发者_运维百科 is there any other way to retrieve the friends of the visiting (not-yet-authorized) user, without the need of a session key (API throws exception with message "Requires user session" if no such key is present)?

And yes, _fb_fromhash is present in the request (when coming to the canvas app. from a user's application tab).

It makes no difference if the accounts being friends to each other are test accounts or normal Facebook accounts.

---

According to the Facebook FAQ's, the automatic authentication isn't available anymore:

http://www.facebook.com/help/?faq=217357081622238