Once you have the cookie and the token you put those in the other REST API commands to get info.

For example:

curl -H "Authorization: oHfwGccgiJlHR5wGrchGw1M83ROmFvBP" \
       --cookie "QSESSIONID=9177564b1203c30000" 192.168.8.1/api/client/list

{
    "clients": [
        {
            "name": "yao-PC",
            "ip": "192.168.8.202",
            "mac": "00:E0:4C:16:0C:33",
            "remote": false,
            "blocked": false,
            "type": "2G"
        },
        {
            "name": "DESKTOP-IJLUEM3",
            "ip": "192.168.8.201",
            "mac": "1C:1B:0D:CD:5B:6F",
            "remote": true,
            "blocked": false,
            "type": "LAN"
        },
        {
            "name": "*",
            "ip": "192.168.17.85",
            "mac": "00:0E:C6:D0:7C:6D",
            "remote": false,
            "blocked": false,
            "type": "2G"
        }
    ],
    "code": 0
}