title: FB Javascript SDK: What's the point of the signed_request?
body: <p>I remember all the stuff from the signed request for canvas apps: <a href="http://developers.facebook.com/docs/authentication/signed_request/" rel="nofollow">http://developers.facebook.com/docs/authentication/signed_request/</a></p>
  
  <p>Now I'm using the JS SDK (FB.login() method), which already gives you the auth token et al. as well as a signed request. Instead of the info that a canvas app's signed request gets, I get just: </p>
  
  <p><code>{"algorithm"=&gt;"HMAC-SHA256", "code"=&gt;"2.AQAdX5Zl5gY-Z_D7.3600.1322193600.1-XXXXX|HmarTBK09MSiB0o76cLgaTUd4y4", "issued_at"=&gt;1322188281, "user_id"=&gt;"XXXXXX"}</code> </p>
  
  <p>So what confuses me is: what's the point of the JS SDK's <code>signed_request</code>? I already have all the info I need from just the login reply.</p>