Hi!
If you are using a JAX-RS compliant web service stack, then you can annotate a parameter of the type HttpServletRequest with the @Context annotation.
Retrieving the HTTP session is trivial.
From the JAX-RS 1.1 Specification, section 6.1:
The @Context annotation can be used to indicate a dependency on a Servlet-defined resource. A Servlet- based implementation MUST support injection of the following Servlet-defined types: ServletConfig, ServletContext, HttpServletRequest and HttpServletResponse.
Best wishes!