二十行Java代碼帶你過，微信公衆號服務器校驗

/*
 * 驗證消息的確來自微信服務器
 * 1）將token、timestamp、nonce三個參數進行字典序排序
 * 2）將三個參數字符串拼接成一個字符串進行sha1加密
 * 3）開發者獲得加密後的字符串可與signature對比，標識該請求來源於微信
 * */
@RequestMapping("/xzlawin/wxget")
public void xzlawin(@RequestParam(value="signature")String signature,@RequestParam(value="timestamp")String timestamp,
                    @RequestParam(value="nonce")String nonce,@RequestParam(value="echostr")String echostr,
                    HttpServletRequest request,HttpServletResponse response) throws IOException
{
    System.out.println("signature="+signature+",timestamp="+timestamp+",nonce="+nonce+",echostr="+echostr);
    String[] arr = {TOKEN,timestamp,nonce};
    Arrays.sort(arr);
    StringBuffer sb = new StringBuffer();
    for(String a:arr) {
        sb.append(a);
    }
    System.out.println("數組字典排序結果:"+sb.toString());
    String sha1Msg = DigestUtils.sha1Hex(sb.toString().getBytes());
    System.out.println("sha1Msg:"+sha1Msg);
    if(signature.equals(sha1Msg)) {
        System.out.println("驗證成功！");
        response.getWriter().println(echostr);
    }
}