Note: if click too quickly user even allow to a DoS for a minute the sogo or give hight load on imap.

How many messages were selected when you started having issues?

it even can be reproduced on 1 email

Have you defined SOGoMailJunkSettings in your sogo.conf? What are its values?

I have: SOGoJunkFolderName= "Junk";

I don't have SOGoMailJunkSettings, mail learn by dovecote sieve script to rspamd.

Can you share the timings from your browser? You should have two XHR requests when clicking the Junk button:

mark-as-junk.jpg (65,016 bytes)   

mark-as-junk.jpg (65,016 bytes)   

Move to junk take more time then move to another folder.

moveToAnyOtherFolder.png (4,074 bytes)   

moveToAnyOtherFolder.png (4,074 bytes)   

moveToJunk.png (7,682 bytes)   

moveToJunk.png (7,682 bytes)   

The moveMessages action performs an IMAP MOVE operation regardless of the destination mailbox.

Check your Dovecot log and configuration.

For example on 1 eml I click quickly 3 times on move to junk and in junk folder I get 3 eml (duplicates) and in dovecot I see that it actually copy and delete and somehow it copy same message that should be deleted:

19/01/2022, 23:50:08 info imap(my@example.com)<3187908><I6ZYXvbVisysFgH4>: expunge: box=INBOX, uid=4397, msgid=<MID@spammer.com>, size=13171
19/01/2022, 23:50:08 info imap(my@example.com)<3187908><I6ZYXvbVisysFgH4>: copy from INBOX: box=Junk, uid=2355, msgid=<MID@spammer.com>, size=13171
19/01/2022, 23:50:08 info imap(my@example.com)<3187904><p9ZVXvbVeMysFgH4>: expunge: box=INBOX, uid=4397, msgid=<MID@spammer.com>, size=13171
19/01/2022, 23:50:08 info imap(my@example.com)<3187904><p9ZVXvbVeMysFgH4>: copy from INBOX: box=Junk, uid=2354, msgid=<MID@spammer.com>, size=13171
19/01/2022, 23:50:08 info imap(my@example.com)<3187896><IZhSXvbVaMysFgH4>: expunge: box=INBOX, uid=4397, msgid=<MID@spammer.com>, size=13171
19/01/2022, 23:50:08 info imap(my@example.com)<3187896><IZhSXvbVaMysFgH4>: copy from INBOX: box=Junk, uid=2353, msgid=<MID@spammer.com>, size=13171

Can SOGo have a sort of delay to get response from IMAP before allow moving same message or another message at least from\to Junk folder?
I can't reproduce it on Trash as it has confirm dialog. Move operation on other folders react too quickly as well to be able to drug and drop them multiply times before they actually move.
Due to that I actually can reproduce moving to\out of Junk because dovecot run spam\ham learning and it takes more time (3-4s in my case, but based on email size it can be a bit more).

I sure many people use learning based not on sogo option, but on dovecot to get it working on plain imap as well in addition to SOGo webmail, and they will face same bug.

Is your Dovecot exposing the MOVE capability?

How I can quickly check this?

❯ telnet localhost 143
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.
. login username password
. OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY LITERAL+ NOTIFY METADATA SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in
. logout
* BYE Logging out
. OK Logout completed (0.001 + 0.000 secs).
Connection closed by foreign host.

had to openssl s_client -connect mx.example.com:143 -starttls imap as plain is not allowed :D and hoped find it in config honestly.

* CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW STATUS=SIZE SAVEDATE LITERAL+ NOTIFY METADATA SPECIAL-USE COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk

one note that I also has this: https://doc.dovecot.org/configuration_manual/spam_reporting/ with exact same COPY syntax, don't know if that important honestly.

SOGo is doing a MOVE operation when the extension is exposed. Therefore I would suspect the COPY/EXPUNGE sequence to come from your global Sieve script and slow down the whole operation. You can try disabling the spam reporting configuration in Dovecot to see if it decreases the delay.

But problem that I need that future to work :p
I agree that if delay will be small it will be harder to face, or even impossible maybe. But it possible in some configurations, and this is the issue

There was request to ask confirmation on move to spam, in same way it done for move to trash, maybe it will resolve particularly (hide) this bug.

Hi Francis, I double checked with people deep in dovecot and they say that's it okay that dovecot log show copy+expunge, this exactly what done by move. So can SOGo wait for end of move operation or timeout for x seconds? Or as proposed use confirmation dialog. This will save from:

1. Abusing move to junk which now allow users to learn strongly one email as spam
2. Stop from dublicating emails