You want to use request.args for your GET parameters in Flask. Here is a quote with an example from the Accessing Request Data section of the Quickstart document.

To access parameters submitted in the URL (?key=value) you can use the args attribute:

searchword = request.args.get('key', '')    

The urllib module has been split into parts and renamed in Python 3 to urllib.request, urllib.parse, and urllib.error.

Import urllib.request instead of urllib.

import urllib.request

Django rest framework has own Request object. You need to use api_view decorator to enable this request type inside function view.

Your indentation is goofed, and you've mixed tabs and spaces. Run the script with python -tt to verify.

From the github README for the WTForms project:

WTForms is a flexible forms validation and rendering library for Python web development. It is framework agnostic and can work with whatever web framework and template engine you choose.

..emphasis mine. Framework agnostic means that this isn't just a library for Flask and that examples such as these (from https://wtforms.readthedocs.io/en/stable/csrf.html#using-csrf):

def view():
    form = UserForm(request.POST)
    if request.POST and form.validate():
        pass # Form is valid and CSRF succeeded

    return render('user.html', form=form)

... aren't necessarily a working pattern in any web framework, rather just a general illustration to exhibit how the library works.

That example transposed to a Flask specific example might look something like this:

@app.route('/submit', methods=("GET", "POST"))
def submit():
    form = UserForm(request.form)
    if request.method == "POST" and form.validate():
        pass  # Form is valid and CSRF succeeded
    return render_template('submit.html', form=form)

The README goes on to say:

There are various community libraries that provide closer integration with popular frameworks.

One such example is Flask-WTF, and the 'hello world' for their library around WTForms looks like this:

@app.route('/submit', methods=('GET', 'POST'))
def submit():
    form = MyForm()
    if form.validate_on_submit():
        return redirect('/success')
    return render_template('submit.html', form=form)

Notice that request.form doesn't have to be passed to the MyForm constructor as it did in the vanilla WTForms example (UserForm(request.form)), and that there is a method available on the forms called validate_on_submit() which both tests that the request is a POST request and also that the submitted form content passes validation.

Along with easier handling of passing POST data through to forms, and validation, Flask-WTF also simplifies CSRF token management, which can be read about here.