Deleting requests 2.0 for unauthenticated users

Question

According to Facebook documentation the application is responsible to delete requests once users had accepted them. According to Facebook the application needs to combine the request-id with the user-id in order to delete the request. However, if the user has not authenticated the application yet, it is not possible to get their user id.

How should one approach this problem?

Answer 1

The Facebook documentation states:

When a user is directed to your app by clicking accepting a Request you must delete the request after it has been accepted... thus it is the developer’s responsibility to clear them once they have been accepted

Notice the 'after it has been accepted' part - this means that it's your responsibility to delete the request ONLY if it has been accepted.

Answer 2

Per the documentation it is your responsibility to delete them.

The docs say you can user either your app access token or a user access token. So if the user is logged in just use their user access token. If the user is not logged in use the app access token.

 DELETE https://graph.facebook.com/[<REQUEST_OBJECT_ID>_<USER_ID>]?
       access_token=[USER or APP ACCESS TOKEN]