I had a similar problem and could solve the issue with a proxy by using osapi.http.get and specifiying the 'authz' : 'signed'.
Maybe it helps.
Thanks for your information. I just tried osapi.http package, it works.
It seems use osapi.http can't pass the cookies to add-on service, do you have any ideas about this ?