Add support for the HTTP QUERY verb (RFC 10008)

[Ricardo Boss (ricardoboss)]

Overview

This adds support for the relatively new HTTP verb QUERY, which allows sending a request body (like POST) while being able to be cached (unlike POST`).

Related Issue

Relates to microsoft/kiota#8126

[Copilot]

🟡 Changes recommended

The new QUERY retry behavior lacks a regression test that exercises an actual QUERY request.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Adds HTTP QUERY support to Kiota’s Python abstractions and HTTPX retry middleware.

Changes:

• Adds Method.QUERY.
• Allows QUERY requests in the default retryable methods.
• Updates retry-handler expectations.

File summaries

File	Description
packages/abstractions/kiota_abstractions/method.py	Defines the QUERY method.
packages/http/httpx/kiota_http/middleware/retry_handler.py	Enables retries for QUERY.
packages/http/httpx/tests/middleware_tests/test_retry_handler.py	Updates allowed-method expectations.

Review details

• Files reviewed: 3/3 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🔵 Needs a closer look

Redirect handling and retry-path regression coverage remain unresolved.

Review details

Suppressed comments (2)

packages/abstractions/kiota_abstractions/method.py:25

• Adding Method.QUERY exposes this request type through the default HTTPX middleware, but RedirectHandler still changes every non-HEAD request to GET for a 302 (packages/http/httpx/kiota_http/middleware/redirect_handler.py:171-174). RFC 10008 requires a QUERY's method and body to be preserved for 302 redirects, so a redirected QUERY is silently downgraded and its body is discarded; update redirect handling and add a regression test before treating QUERY as fully supported.

    # The HTTP QUERY method
    QUERY = "QUERY"

packages/http/httpx/tests/middleware_tests/test_retry_handler.py:27

• The new assertion only checks that the default set contains the string QUERY; it does not exercise the retry path with an actual httpx.Request("QUERY", ...). Add a regression test alongside test_retries_valid so a future method-specific check cannot make QUERY appear in the constant while still skipping its retry.

        ['HEAD', 'GET', 'PUT', 'POST', 'PATCH', 'DELETE', 'OPTIONS', 'QUERY']

• Files reviewed: 3/3 changed files
• Comments generated: 0 new
• Review effort level: Lite

[Vincent Biret (baywet)]

Thank you for making the changes!

[Vincent Biret (baywet)]

Actually Ricardo Boss (@ricardoboss) re-reading the bot's comments, and the RFC, I think it's correct for the redirect handler, would you mind looking into this please? And we'll probably need to replicate the change across languages.

[Copilot]

Copilot review overview

🔵 Needs a closer look

Preserve QUERY and its body across 302 redirects and add a regression test.

Review effort: Lite
Findings: None

Resolved since last review (1)

• This change only asserts that QUERY appears in the allowlist; it does not exercise a QUERY…

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Vincent Biret (baywet)]

Thank you for making the changes!

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved review comments remain, and all supplied assessments indicate approval readiness.

Review effort: Lite
Findings: None