I haven't fixed this yet , but thanks for all tour help @bakman2 , what I'm trying to do now is doing all of this but instead of simulating curl requests copied from web site now I've installed the iOS app version (of this web app) in my macos, inspected the calls with a proxy for the calls, and found that the calls from the iOS app are different than the web site... better built, and with a token that seems to not expire :), so i'm reusing the token of the iOS app calls from nod-red and everything works fine, and as answers come in nice JSON format os easier to play with it
I'll come back to this thread in case I manage to fix this, but at least I have it working via other way.