I am trying to access the Salesforce Reporting REST API.

public with sharing class SalesforceReportApi {

    private final static String REPORTS_RESOURCE = '/services/data/v44.0/analytics/reports/';

    private static HttpResponse execute(String method, String restResource) {

        HttpRequest request = new HttpRequest();

        request.setEndpoint(endpoint + restResource);
        request.setTimeout(120000); // 2 Minutes

        request.setHeader('Accept', 'application/json');    
        request.setHeader('Content-Type',  'application/json'); 
        request.setHeader('Authorization', 'OAuth ' + UserInfo.getSessionID());       
        request.setHeader('Authorization', 'Bearer ' + UserInfo.getSessionID());

        HttpResponse httpResponse = new Http().send(request);

        return httpResponse;

    private static String endpoint {
        get { 
            return URL.getOrgDomainUrl().toExternalForm(); 

    public static MatrixReport getMatrixReport(Id reportId) {

        HttpResponse response = execute(HttpMethod.GET, REPORTS_RESOURCE + reportId);

        return (MatrixReport) JSON.deserialize(response.getBody(), MatrixReport.class);

The request produced is:

Method: GET
URL: https://x--x.cs83.my.salesforce.com/services/data/v44.0/analytics/reports/XXXX

But I am getting this error:

{"message":"Session expired or invalid","errorCode":"INVALID_SESSION_ID"}

I thought that since the recent release using URL.getOrgDomainUrl() meant to access the REST API meant I didn't need to authenticate.

Sandbox org is on Spring '19 Patch 19.4


  1. What am I doing wrong?
  2. How can I fix it?

NOTE: I fixed this using Named Credentials you can read more here

  • 1
    Does UserInfo.getSessionId() returns valid session? Is given method called from lightning or in async mode (queueable or future)?
    – kurunve
    Apr 26, 2019 at 12:28
  • 1
    Which User is running this code?
    – Jayant Das
    Apr 26, 2019 at 13:46
  • 1
    Does the User's profile has API enabled permission set?
    – Jayant Das
    Apr 26, 2019 at 13:51
  • 1
    Where do you see null? If you are seeing that in debug logs, then you won't be able to see the value there. Debug logs do not publish this value.
    – Jayant Das
    Apr 26, 2019 at 14:29
  • 1
    So you are using a Guest User here?
    – Jayant Das
    Apr 26, 2019 at 14:46

1 Answer 1


Based on the comments, it seems you are using a Guest User here to be able to get a Session Id and utilize that in your code using request.setHeader('Authorization', 'OAuth ' + UserInfo.getSessionID());

The error INVALID_SESSION_ID you are receiving is expected in that case. Refer to Guest user session ID returned NULL in UserInfo.getSessionId() knowledge article. It discusses exactly this scenario which you are facing now.

You will need to adjust the approach here as there's no workaround to get past this.

  • An alternative would be to use Named Credentials ?
    – Robs
    Apr 26, 2019 at 15:02
  • @Robs You can try, I haven't really tried it out myself. But definitely UserInfo.getSessionId() doesn't seem to be the way here.
    – Jayant Das
    Apr 26, 2019 at 15:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .