查看RestBaseController的源文件

...
    protected $allowedDeviceTypes = ['mobile', 'android', 'iphone', 'ipad', 'web', 'pc', 'mac', 'wxapp'];
...
    private function _initUser()
    {
        $token      = $this->request->header('XX-Token');
        $deviceType = $this->request->header('XX-Device-Type');
        ...
    }
...

前端发送token和机器设备代码已写好，用户登录非常方便