Hi Bruno,
At a first glance, this behavior seems to be really too application-specific to be something that would really make sense in Orbeon Forms. Instead, would it be possible for you to implement this in a "trampoline service", which takes the unsigned request from Orbeon Forms, does the call to get the token, sends the request with the token to the backend service, and the response back to Orbeon Forms?
Alex
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet