No. I figured that out after I sent the message. I changed the https in the curl to http and now get
HTTP/1.1 401 Unauthorized
X-Powered-By: Express
Access-Control-Allow-Origin: *
WWW-Authenticate: Basic realm="Authorization Required"
Content-Type: text/plain; charset=utf-8
Content-Length: 12
ETag: W/"c-dAuDFQrdjS3hezqxDTNgW7AOlYk"
Date: Wed, 13 Jan 2021 22:23:38 GMT
Connection: keep-alive
Keep-Alive: timeout=5
which looks to be moving forward
The file is in tmp so now all I need is to work out how to let Node-red know.