I found the solutions. That is append appsecret_proof parameter at call API as "http://graph.facebook.com/me?access_token={access_token value}$appsecret_proof={appsecret_proof value}.
If you are no want append appsecret_proof parameter then you can change set to no use appsecret_proof paameter on your app management site. The management site menu is setting>advanced>Require AppSecret Proof for Server API calls -> set to disabled.
Facebook 集成 Fail when Facebook api request using Facebook4j
原文：http://www.cnblogs.com/wsfjlagr/p/4428660.html