We're in the process of putting a buy button on our app using the PHP API and callbacks.
In the signed request, I have a buyer and a receiver. In other $_REQUEST vars, I get user_id.
When called from some accounts, these three are all the same value, and all three are the facebook user id of the account we're using. This is exactly as expected.
However, sometimes, the buyer and receiver are different from the user_id. In this case, the user_id is the expected value for the facebook account, but the buyer and receiver are for no account we (or our app) recognize.
We're in the process of further isolation -- don't know yet if this is account-specific, session-specific, or something else.
edited to add that the buyer and receiver appear to be session-specific.
At any rate, we'd really like to know what the meanings of these three fields are, and why they are sometimes the same or sometimes different. If you can tell us, or point us at some documentation, that would be great.
Kim
This works for me: ...
...