Whenever I sigin using Medisense Signin API, I get the JSESSIONID and call executes successfully but when I use this JSESSION ID for further mediasense API calls like SignOut or GetAllActive Sessions or GetSystemTime etc I get the following error:
{"responseMessage":"Failure: Invalid session. The session may have expired. Sign in again or enter a valid JSESSIONID.","responseCode":4021}
SigInCode:
String url = "https://" + serverAddress + "/ora/authenticationService/authentication/signIn";
PostMethod postMethod = new PostMethod(url);
HttpClient client = new HttpClient();
postMethod.setParameter("username", userName);
postMethod.setParameter("password", password);
postMethod.setParameter("Content-Type", contentType);
postMethod.setRequestEntity(new StringRequestEntity(requestBody, contentType, null));
client.executeMethod(postMethod);
After this I get the JSESSIONID Successfully and get response:
{"responseMessage":"Success: Your request was successfully completed.","responseCode":2000}
After this I make call method of SIgnOut With the same JSESSIONID I got above:
SignOut:
String contentType = "application/json";
String url = "https://" + serverAddress + "/ora/authenticationService/authentication/signOut";
PostMethod postMethod = new PostMethod(url);
HttpClient client = new HttpClient();
postMethod.setParameter("username", userName);
postMethod.setParameter("password", password);
postMethod.setParameter("Content-Type", contentType);
client.executeMethod(postMethod);
And I get the response:
{"responseMessage":"Failure: Invalid session. The session may have expired. Sign in again or enter a valid JSESSIONID.","responseCode":4021}
And same response I get when I make call to GetAllActiveSessions 
GetAllActiveSessions:
String requestBody = "{\n"
+ "\"requestParameters\": {\n"
+ "\"deviceRef\": \"" + deviceReference + "\",\n"
+ "\"mediaStreams\": [{\n"
+ "\"mediaType\":\"AUDIO\"\n"
+ "}\n]\n"
+ "}\n"
+ "}";
System.out.println("Request Body: " + requestBody + "\n JSESSIONID:" + JSESSIONID);
String contentType = "application/json";
String url = "https://" + serverAddress + "/ora/controlService/control/startRecording";
System.out.println("URL: " + url);
PostMethod postMethod = new PostMethod(url);
HttpClient client = new HttpClient();
postMethod.setRequestHeader("JSESSIONID", JSESSIONID);
postMethod.setParameter("JSESSIONID", JSESSIONID);
postMethod.setParameter("Content-Type", contentType);
postMethod.setRequestEntity(new StringRequestEntity(requestBody, contentType, null));
client.executeMethod(postMethod);
But Not Executed Successfully:
The Sequence of making calls is:
SigIn();
GetAllActiveSessions();
SignOut();
PS: The JSESSION ID the datamember of the class so that it may be accessible in all methods once initialized in SignIn Method and I have checked in other mthods and JESSIONID is available that was populated by SignIn method.
Any Help will be appreciated as I have looked a lot and now I am tired of it
Note: I have attached the file containing complete source code too.
Thanks,
First of all this is the response of SignIn call(I have displayed headers and responsebody of the request):
null=[HTTP/1.1 200 OK]
Server=[]
Set-Cookie=[JSESSIONID=E3D5861F70B355898CAE1DA00810D014; Path=/ora/; Secure; HttpOnly]
Content-Length=[91]
Date=[Fri, 18 Apr 2014 11:55:29 GMT]
Content-Type=[application/json]
Header Value:JSESSIONID=E3D5861F70B355898CAE1DA00810D014; Path=/ora/; Secure; HttpOnly
JSESSIONID:E3D5861F70B355898CAE1DA00810D014
And from this response SignIn Call seems to be working fine.
Secondly, I was Invoking SigIn calls multiple times because I was trying to understand the behavior that When an API User tries to SigIn who is already SignIn then what happens, either a new JSESSIONID is assigned or the Same JSESSIONID is returned back ? In poster(as I told you earlier) that If I try to SignIn multiple times with the same API User, then just for the first SignIn call JSESSIONID was returned in the Header and after that no JESSEIONID was returned in the header until I signOut that API User and SignIn again but that was not the case when I do programatically(Programatically Against each signIn call with the same API USER I get different JSESSIONID). kindly resolve my this confusion too
Thirdly, In the above mentioned code you may see that I have mentioned JESSIONID in the header of the request though @jwolfeld said there is no need of this medisense handles this by ourself.
