title: Use client fingerprint to encode JWT token?
body: <p>I'm wondering if it would be <em>best practice</em> to use a clients fingerprint as JWT-secret for encoding. However I couldn't find anything in the WWW concerning this question, but so far it makes sense to me to do it. </p>
  
  <p>I'm thinking about generating a fingerprint client-side with JavaScript and sent it to the API with every call. The API should then use the fingerprint with a hard coded secret together for encoding and decoding the token.</p>
  
  <p>Isn't this a good method to prevent CSRF? 
  Or am I missing out on something else?
  Or in general: What is the best way to prevent CSRF with JWT?
  (I'm using PHP and VueJS, is there maybe a case related solution?)</p>