MFA fix, added IP blacklist, update webmail client

internal/mailstore/store.go

@@ -1,15 +1,30 @@
 package mailstore
 
 import (
+	"bytes"
 	"crypto/rand"
 	"encoding/hex"
 	"errors"
 	"fmt"
+	"net/mail"
 	"os"
 	"path/filepath"
 	"time"
 )
 
+// extractHeaderValue reads a single header out of raw without parsing the body — used
+// to compute StoreMessage's cached_to column cheaply (no MIME/multipart walk needed
+// just to cache a header for fast folder-listing display). Returns "" on any parse
+// failure or if the header is absent, never an error — this is a display convenience,
+// not something delivery should ever fail over.
+func extractHeaderValue(raw []byte, name string) string {
+	msg, err := mail.ReadMessage(bytes.NewReader(raw))
+	if err != nil {
+		return ""
+	}
+	return msg.Header.Get(name)
+}
+
 // ErrQuotaExceeded is returned by StoreMessage when storing raw would push the
 // mailbox over its quota. No row, file, or used_bytes change occurs in that case.
 var ErrQuotaExceeded = errors.New("mailstore: mailbox quota exceeded")
@@ -51,7 +66,7 @@ func (s *Store) StoreMessage(mailboxID int64, folder string, raw []byte, message
 		return 0, err
 	}
 
-	uid, err = s.DB.InsertMessage(mailboxID, folder, messageIDHeader, "", now, int64(len(raw)), storagePath, nonce, from, subject)
+	uid, err = s.DB.InsertMessage(mailboxID, folder, messageIDHeader, "", now, int64(len(raw)), storagePath, nonce, from, extractHeaderValue(raw, "To"), subject)
 	if err != nil {
 		os.Remove(storagePath)
 		return 0, err