Request Headers and SessionToken

[ChrisJohnson2]

Greetings API User group,

Have been working through article 000032481 “How to use the RSA Archer REST API with Windows PowerShell” and the logic is starting to click   I successfully logged in using Windows PowerShell, generated a session token and executed the examples.

The part I’m having trouble understanding is how this command attaches the SessionToken to the header?

Based on the attached screenshots can anyone explain what is happening in the background to make this work?

Many thanks in advance  

[Ilya_Khen]

Session_token is created when you first authenticate to Archer:

$login_url = $base_url + "/api/core/security/login"
$body = '{"InstanceName":"' + $instance_name + '","Username":"' + $username + '","UserDomain":"' + $user_domain + '","Password":"' + $password + '"}'
$response_login = Invoke-RestMethod -Method Post -Uri $login_url -Body $body -ContentType "application/json" -SessionVariable $sess
$session_token = $response_login.RequestedObject.SessionToken

Then you use this session token in the header all the time for the rest of the calls.