An obfuscated HTML document is deployed at https://idp-elearning.cloud.nds.rub.de/websec/postMessage/obfuscated.html. It contains a secret token distributed via PostMessage. Implement your own code, calling the document and extracting the token.