At the departures spas, the answer is in person, boarding pass in hand. They are pretty strict about only booking treatments for passengers who are entitled to them. However, you're entitled to use the showers in the spa so long as you're entitled to lounge access, even if you aren't permitted a treatment.

In the arrivals lounges, I think anyone who gets in can book a treatment.