Support for the QUERY HTTP method

[Kfir-G]

Hey, this is my first time posting here so bear with me 🙂

I came across the new QUERY HTTP method (there's a draft spec here: https://http.dev/query) and thought it'd be cool if Starlette supported it. Basically it's like a GET but lets you send a body, useful for complex search/filter requests where query strings get messy.

I tried it locally and it actually already kind of works if you just do:

Route("/search", search, methods=["QUERY"])

since Starlette doesn't seem to hardcode the method list in the router itself.

But I noticed a couple spots that do have a fixed list of methods and would probably need QUERY added:

• HTTPEndpoint in endpoints.py only checks for GET/HEAD/POST/PUT/PATCH/DELETE/OPTIONS, so you can't add a .query() method to a class-based endpoint right now
• schemas.py has a similar fixed list for generating the OpenAPI schema

Before I try to open a PR (first one for me, so go easy 😅), wanted to check:

1. Is this something you'd even want, given the spec isn't finalized yet?
2. Any concerns about security here? I saw the recent advisory about HTTPEndpoint dispatching methods via getattr, so I want to make sure I'm not making that worse.
3. Would .query() be the right name for the handler method on HTTPEndpoint?

Let me know if this is worth pursuing and I'll put a PR together.

[Kfir-G]

I created my PR: #3370