after 24h i found this in my github project:

so when i used my tomacat config the curl works in local + vm :)

the section that cause the problem is:

<Resource name="UserDatabase" auth="Container"
          type="org.apache.catalina.UserDatabase"
          description="User database that can be updated and saved"
          factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
          pathname="conf/tomcat-users.xml" />

thank you