Confirmed that the IP field is ignored just now using postman & my own account.
This bug should really have it's priority bumped as it solely enables the alt "renting" style websites.
Multiple sites (mcleaks.net is a good example) simply send join requests on behalf of their clients, allowing them to hold onto all of the sensitive account data while renting out accounts over & over again to thousands of users. With services like these, trolls can always just join a server again with another account after being banned with zero consequence.
I cannot reproduce this. Could you please provide more info on your browser setup like name/version & any addon(s) that may be conflicting with the site functionality (ad-blockers for example)?
If you could also provide another video with your browsers developer tools open (ctrl+shift+I in google chrome) so that any clientside errors are visible that'd be awesome!
@@unknown