app.py

from flask import Flask, render_template, g, session, flash, request, url_for, redirect, abort
import sqlite3

app = Flask("Ola")

DATABASE  = "banco.bd"
SECRET_KEY = "1234"

app.config.from_object(__name__)

def conectar():
    return sqlite3.connect(DATABASE)

@app.before_request
def before_request():
    g.bd = conectar()

@app.teardown_request    
def teardown_request(f):
    g.bd.close()    

@app.route("/login", methods = ["POST", "GET"])    
def login():
    erro=None
    if(request.method == "POST"):
        if request.form['username'] == "Ocean" and request.form['password'] == "ocean123":
            session['logado'] = True
            flash("Usuario logado" + request.form['username']) 
            return redirect(url_for('exibir_posts'))
        erro = "Usuario e senha incorretos"
    return render_template("login.html", erro=erro)       



    return render_template("login.html")

@app.route("/logout") 
def logout():
    session.pop('logado', None)
    flash("Logout efetuado")
    return redirect(url_for("login"))

@app.route('/')
def exibir_posts():
    
    sql = "SELECT titulo, texto, data_criacao FROM posts ORDER BY id DESC"
    resultado  = g.bd.execute(sql)
    posts = []


    for titulo, texto, data_criacao in resultado.fetchall():
        posts.append({
            "titulo": titulo,
            "texto": texto,
            "data_criacao": data_criacao
        })

   
    return render_template("exibir_posts.html", post=posts)

@app.route('/inserir', methods=['POST', 'GET'])
def inserir_posts():    
    if not session.get('logado'):
        abort(401)
    titulo = request.form.get('titulo')   
    texto = request.form.get('texto')
    sql = "INSERT INTO posts (titulo, texto) VALUES (? , ?)"
    g.bd.execute(sql,[titulo, texto])
    g.bd.commit()
    flash("Novo post inserido")
    return redirect(url_for('exibir_posts'))