fix: small UI fix

Author: TwoA2U

.gitignore

@@ -16,4 +16,7 @@ iocscan.exe
 # Editor
 .idea/
 .vscode/
-*.swp
+*.swp
+
+# go cache
+.gocache/

README.md

@@ -40,7 +40,7 @@ Query indicators against VirusTotal, AbuseIPDB, ThreatFox, ipapi.is, MalwareBaza
 - **Domain enrichment** — VirusTotal multi-engine verdict, reputation, registrar, creation date, A records, categories, and ThreatFox C2 intelligence
 - **Multi-signal risk scoring** — `riskLevel` computed from manifest-driven rules across all integrations; any single signal can escalate the level independently
 - **Plugin architecture** — each integration is a self-contained Go file implementing a single interface; adding a new vendor requires one file and one registry line
-- **Web UI** — Tailwind CSS + Vue 3, authenticated scanner, generic-endpoint-backed IP/hash/domain views, column visibility toggles, export to CSV/JSON, scan history, and per-vendor cache diagnostics. The current UI keeps its established per-mode layouts while adapting generic `ScanResult` payloads locally underneath
+- **Web UI** — Tailwind CSS + Vue 3, authenticated scanner, generic-endpoint-backed IP/hash/domain views, column visibility toggles, export to CSV/JSON, scan history, and per-vendor cache diagnostics. The current UI keeps its established per-mode layouts while adapting generic `ScanResult` payloads locally underneath, with richer custom cards for key vendors and manifest-driven fallback cards for simple or newly added integrations
 - **Bulk scanning** — up to 100 IPs, hashes, or domains per request
 - **Local cache** — SQLite-backed caching per integration to avoid redundant API calls
 - **Rate limiting** — built-in token-bucket limiter with 1 MB request body cap
@@ -169,7 +169,7 @@ The `-p` flag always overrides the config file port.
 | Feature | Description |
 |---------|-------------|
 | Authenticated UI | Login page, per-user session, admin user management, settings page |
-| Cards view | Per-indicator detail cards with risk badges and source links. Benign no-hit cards are hidden; diagnostics and raw JSON still show miss/error detail |
+| Cards view | Per-indicator detail cards with risk badges and source links. Core vendors keep handcrafted cards where richer presentation helps, while integrations without custom UI can render automatically through manifest-driven fallback cards. Benign no-hit cards are hidden; diagnostics and raw JSON still show miss/error detail |
 | Table view | Sortable multi-indicator comparison table |
 | Column toggles | Show/hide individual fields per section |
 | Bulk input | Paste multiple indicators or upload a `.txt` / `.csv` file |
@@ -412,19 +412,20 @@ iocscan/
     ├── components/
     │   ├── AdminPage.js           — admin user management UI
     │   ├── ColumnDrawer.js        — column visibility drawer
+    │   ├── IntegrationCard.js     — generic manifest-driven fallback card renderer
     │   ├── LoginPage.js           — login form
     │   ├── IOCScanner.js          — main scanner (IP, Hash, Domain tabs)
     │   ├── SettingsPage.js        — password change + API key management
     │   └── ResultsTable.js        — sortable results table
     ├── composables/
     │   ├── useAuth.js             — auth/session/page state + authenticated fetch wrapper
     │   ├── useColumnVisibility.js — column toggle state
-    │   ├── genericScanResultUtils.js — shared helpers for adapting generic ScanResult payloads
-    │   ├── useDomainResults.js    — domain scan state, table, export, local generic-result adapter
-    │   ├── useHashResults.js      — hash scan state, table, export, local generic-result adapter
+    │   ├── genericScanResultUtils.js — shared helpers for adapting generic ScanResult payloads and building manifest fallback cards
+    │   ├── useDomainResults.js    — domain scan state, table, export, local generic-result adapter + fallback card view model
+    │   ├── useHashResults.js      — hash scan state, table, export, local generic-result adapter + fallback card view model
     │   ├── useIntegrations.js     — manifest fetch at boot
     │   ├── useIOCScan.js          — central scan orchestration + generic endpoint calls
-    │   ├── useIPResults.js        — IP scan state, table, export, local generic-result adapter
+    │   ├── useIPResults.js        — IP scan state, table, export, local generic-result adapter + fallback card view model
     │   └── useScanHistory.js      — scan history management
     ├── index.html                 — main UI entry point
     ├── main.js                    — Vue app bootstrap + loadManifests()
@@ -454,7 +455,7 @@ iocscan/
 
 | File | Change |
 |------|--------|
-| `web/components/IOCScanner.js` | Usually no change for diagnostics/raw JSON; richer vendor-specific cards or table presentation may still need explicit UI work |
+| `web/components/IOCScanner.js` | Usually no change. Simple integrations can render automatically through manifest-driven fallback cards; only richer vendor-specific cards or bespoke table presentation still need explicit UI work |
 | `auth/models.go` / `auth/handlers.go` | Add encrypted per-user key storage fields if the vendor requires a new key |
 
 **Additional wiring for IP integrations that require a key** (e.g. GreyNoise):
@@ -463,7 +464,7 @@ iocscan/
 |------|--------|
 | `server/server.go` | Load the stored key and pass it into the generic scan path |
 
-> **Note:** The primary scanner calls generic scan endpoints and adapts generic `ScanResult` payloads locally inside the per-mode frontend composables.
+> **Note:** The primary scanner calls generic scan endpoints and adapts generic `ScanResult` payloads locally inside the per-mode frontend composables. If an integration has no handwritten card in `IOCScanner.js`, the frontend can still render it through `IntegrationCard.js` using the manifest card definition.
 
 ### Step 1 — Create `integrations/yourvendor.go`
 

integrations/integration.go

@@ -114,6 +114,11 @@ type FieldDef struct {
 	FalseLabel string `json:"falseLabel,omitempty"`
 	TrueColor  string `json:"trueColor,omitempty"`
 	FalseColor string `json:"falseColor,omitempty"`
+
+	// HideFalse skips rendering this bool field when the value is false.
+	// Useful for capability/flag style fields where only positive findings
+	// should appear in the generic card.
+	HideFalse bool `json:"hideFalse,omitempty"`
 }
 
 // ── Card Definition ───────────────────────────────────────────────────────────

integrations/ipapi.go

@@ -20,18 +20,40 @@ const ipapiEndpoint = "https://api.ipapi.is"
 // IPAPIResponse is the raw response from ipapi.is.
 type IPAPIResponse struct {
 	IP      string `json:"ip"`
+	RIR     string `json:"rir"`
+	IsBogon bool   `json:"is_bogon"`
+	IsMobile bool  `json:"is_mobile"`
+	IsSatellite bool `json:"is_satellite"`
+	IsCrawler bool `json:"is_crawler"`
+	IsDatacenter bool `json:"is_datacenter"`
+	IsTor bool `json:"is_tor"`
+	IsProxy bool `json:"is_proxy"`
+	IsVPN bool `json:"is_vpn"`
+	IsAbuser bool `json:"is_abuser"`
+	VPN struct {
+		Service     string `json:"service"`
+		Type        string `json:"type"`
+		LastSeenStr string `json:"last_seen_str"`
+	} `json:"vpn"`
 	Company struct {
-		Name string `json:"name"`
-		Type string `json:"type"`
+		Name        string `json:"name"`
+		Type        string `json:"type"`
+		AbuserScore string `json:"abuser_score"`
+		Domain      string `json:"domain"`
+		Network     string `json:"network"`
+		Whois       string `json:"whois"`
 	} `json:"company"`
 	ASN struct {
 		Org string `json:"org"`
 	} `json:"asn"`
 	Location struct {
-		Country  string `json:"country"`
-		State    string `json:"state"`
-		City     string `json:"city"`
-		Timezone string `json:"timezone"`
+		Country    string `json:"country"`
+		CountryCode string `json:"country_code"`
+		State      string `json:"state"`
+		City       string `json:"city"`
+		Timezone   string `json:"timezone"`
+		LocalTime  string `json:"local_time"`
+		IsDST      bool   `json:"is_dst"`
 	} `json:"location"`
 }
 
@@ -94,8 +116,13 @@ func (i IPAPIIntegration) Manifest() Manifest {
 				{Key: "city", Label: "City", Type: FieldTypeString},
 				{Key: "state", Label: "State", Type: FieldTypeString},
 				{Key: "timezone", Label: "Timezone", Type: FieldTypeString},
+				{Key: "localTime", Label: "Local Time", Type: FieldTypeString},
 				{Key: "org", Label: "Organisation", Type: FieldTypeString},
 				{Key: "companyName", Label: "Company", Type: FieldTypeString},
+				{Key: "abuserScore", Label: "Abuser Score", Type: FieldTypeString},
+				{Key: "companyDomain", Label: "Domain", Type: FieldTypeString},
+				{Key: "vpnService", Label: "VPN Service", Type: FieldTypeString},
+				{Key: "vpnType", Label: "VPN Type", Type: FieldTypeString},
 				{
 					Key:   "companyType",
 					Label: "Company Type",
@@ -110,13 +137,24 @@ func (i IPAPIIntegration) Manifest() Manifest {
 						"education":  "#94a3b8",
 					},
 				},
+				{Key: "isVPN", Label: "VPN", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#f87171", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isProxy", Label: "Proxy", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#fb923c", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isTor", Label: "Tor", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#f87171", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isDatacenter", Label: "Datacenter", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#fb923c", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isCrawler", Label: "Crawler", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#fbbf24", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isAbuser", Label: "Abuser", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#f87171", FalseColor: "#34d399", HideFalse: true},
+				{Key: "isBogon", Label: "Bogon", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#94a3b8", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isMobile", Label: "Mobile", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#60a5fa", FalseColor: "#94a3b8", HideFalse: true},
+				{Key: "isSatellite", Label: "Satellite", Type: FieldTypeBool, TrueLabel: "Yes", FalseLabel: "No", TrueColor: "#c084fc", FalseColor: "#94a3b8", HideFalse: true},
 			},
 		},
 		TableColumns: []TableColumn{
 			{Key: "country", Label: "Country", DefaultVisible: true},
 			{Key: "city", Label: "City", DefaultVisible: false},
 			{Key: "org", Label: "ASN Org", DefaultVisible: true},
 			{Key: "companyType", Label: "Company Type", DefaultVisible: true},
+			{Key: "isVPN", Label: "VPN", DefaultVisible: false},
+			{Key: "isAbuser", Label: "Abuser", DefaultVisible: false},
 		},
 	}
 }
@@ -148,12 +186,28 @@ func (i IPAPIIntegration) Run(ctx context.Context, ioc, apiKey string, useCache
 
 func ipapiToResult(r *IPAPIResponse) *Result {
 	return &Result{Fields: map[string]any{
-		"country":     r.Location.Country,
-		"city":        r.Location.City,
-		"state":       r.Location.State,
-		"timezone":    r.Location.Timezone,
-		"org":         r.ASN.Org,
-		"companyName": r.Company.Name,
-		"companyType": r.Company.Type,
+		"country":      r.Location.Country,
+		"city":         r.Location.City,
+		"state":        r.Location.State,
+		"timezone":     r.Location.Timezone,
+		"localTime":    r.Location.LocalTime,
+		"isDST":        r.Location.IsDST,
+		"org":          r.ASN.Org,
+		"companyName":  r.Company.Name,
+		"companyType":  r.Company.Type,
+		"companyDomain": r.Company.Domain,
+		"abuserScore":  r.Company.AbuserScore,
+		"isBogon":      r.IsBogon,
+		"isMobile":     r.IsMobile,
+		"isSatellite":  r.IsSatellite,
+		"isCrawler":    r.IsCrawler,
+		"isDatacenter": r.IsDatacenter,
+		"isTor":        r.IsTor,
+		"isProxy":      r.IsProxy,
+		"isVPN":        r.IsVPN,
+		"isAbuser":     r.IsAbuser,
+		"vpnService":   r.VPN.Service,
+		"vpnType":      r.VPN.Type,
+		"vpnLastSeen":  r.VPN.LastSeenStr,
 	}}
 }

web/components/AppShell.js

@@ -1,15 +1,15 @@
-import IOCScanner from './IOCScanner.js';
-import LoginPage from './LoginPage.js';
-import SettingsPage from './SettingsPage.js';
-import AdminPage from './AdminPage.js';
+import IOCScanner from './IOCScanner.js?v=12';
+import LoginPage from './LoginPage.js?v=12';
+import SettingsPage from './SettingsPage.js?v=12';
+import AdminPage from './AdminPage.js?v=12';
 
 import {
     authReady,
     currentUser,
     currentPage,
     mustChangePw,
     checkSession,
-} from '../composables/useAuth.js';
+} from '../composables/useAuth.js?v=12';
 
 const { defineComponent, computed, onMounted, h } = Vue;
 

web/components/ColumnDrawer.js

@@ -10,12 +10,12 @@ import {
     hashDynCols,
     toggleCol, toggleSection, toggleField,
     toggleHashCol, toggleHashSection, setAllCols,
-} from '../composables/useColumnVisibility.js';
+} from '../composables/useColumnVisibility.js?v=12';
 
 import {
     currentIOCMode, colBadge, ipDrawerSections, hashDrawerSections,
     colDrawerOpen, openColDrawer, closeColDrawer,
-} from '../composables/useIOCScan.js';
+} from '../composables/useIOCScan.js?v=12';
 
 const { defineComponent } = Vue;