claude-code-best-practices

# Claude Code Best Practices for Python Web Application

## Task: Implementing User Authentication

### Best Practices
- Use established libraries like Flask-Login or Django's built-in authentication
- Implement proper password hashing with libraries like bcrypt or Argon2
- Follow the principle of least privilege for user permissions
- Implement rate limiting to prevent brute force attacks

### Example Implementation
```python
from flask import Flask, request, jsonify
from flask_login import LoginManager, UserMixin, login_user, login_required
import bcrypt

app = Flask(__name__)
app.secret_key = 'your-secret-key'
login_manager = LoginManager(app)

# User model
class User(UserMixin):
    def __init__(self, id, username, password):
        self.id = id
        self.username = username
        self.password = password

# ... rest of the implementation
```

### Security Considerations
- Always use HTTPS for authentication endpoints
- Implement proper session management
- Regularly update dependencies to patch security vulnerabilities
- Consider implementing multi-factor authentication for sensitive operations