bWAPP Broken Auth. Insecure Login Forms security level medium

Recovering the passphrase from a client-side JS “secret” step by step