I am guessing that you are authenticated to Twitch in the browser, and therefore, it returns data. From curl, you are not authenticated and must provide the OAuth key that ties the channel/ endpoint to a particular broadcaster based on that OAuth.
Check to make sure your $code is valid and being pulled back, I suppose, if you are getting an error.