NPM and JSVM, custom basic-auth plugin more details?

You search for the raw key, it’s a one way hash search, so you can’t search for the hash itself. Otherwise it would be pointless to hash in the first place.