From 1bda82e9416b0513a3eb69e2d997017c7b21202c Mon Sep 17 00:00:00 2001
From: Evgenii Kolosov <108291208+Ljutyj@users.noreply.github.com>
Date: Mon, 7 Oct 2024 09:57:59 +0300
Subject: [PATCH] VCST-1918: XAPI only operates with approved reviews (#63)

fix: Now XAPI only provides approved reviews otherwise anyone could get all the reviews at the Frontend
---
 .../Queries/CustomerReviewsQueryHandler.cs                    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/VirtoCommerce.CustomerReviews.ExperienceApi/Queries/CustomerReviewsQueryHandler.cs b/src/VirtoCommerce.CustomerReviews.ExperienceApi/Queries/CustomerReviewsQueryHandler.cs
index a7ef1b4..ee93d90 100644
--- a/src/VirtoCommerce.CustomerReviews.ExperienceApi/Queries/CustomerReviewsQueryHandler.cs
+++ b/src/VirtoCommerce.CustomerReviews.ExperienceApi/Queries/CustomerReviewsQueryHandler.cs
@@ -36,8 +36,10 @@ protected virtual CustomerReviewSearchCriteria GetSearchCriteria(CustomerReviews
     {
         var criteria = request.GetSearchCriteria<CustomerReviewSearchCriteria>();
         criteria.StoreId = request.StoreId;
-        criteria.EntityIds = new[] { request.EntityId };
+        criteria.EntityIds = [request.EntityId];
         criteria.EntityType = request.EntityType;
+        // XAPI only operates with approved reviews
+        criteria.ReviewStatus = [CustomerReviewStatus.Approved];
 
         if (!string.IsNullOrEmpty(request.Filter))
         {