What reliable data can be obtained from the user to further create an authorization session hash?

Question

PHP

Good afternoon.
When authorizing a user on the site, I want to give him a Session ID, which includes hashed ones, for example:
- Login
- Password hash
- IP address
- Browser User-Agent
Write to Cookie. Next, when authenticating, create a hash at the server level by sending IP and UserAgent.
Is there any more or less "valid" (genuine) data, like login and password, that could also be included in the hash, in the Cookie? And how viable is such an idea in terms of security / adequacy?
Thank you in advance.

Answer 1

1. The session ID is primarily an auto-generated parameter that should not be based on user data. Never.
2. If you need to have some user data in quick access on the client side, you can use JWT tokens