The IoT platform could provide a download proxy that provides access to the original download endpoint. This would:
a) simplify authentication problems and
b) could implement on-the-fly (delta) compression and
c) could allow resuming the download even if the original endpoint does not support it.