Am I understanding csrf correctly?

Question

CSRF

Entering a login and password - installing csrf and writing it to the database and to the session - when submitting forms, verifying csrf from the session with csrf from the database. But questions arise, based on what parameters to generate a csrf token?

Answer 1

Adding to the database is redundant. What settings? Random string + user ip + user agent of the user.