The PasswordAuthStrategy defaults cannot be used in production

When you add a PasswordAuthStrategy you get a warning in the console:

Connecting to databaseWarning: connect.session() MemoryStore is not designed for a production environment, as it will leak memory, and will not scale past a single process.

This is because of express session: https://github.com/expressjs/session/blob/master/README.md#compatible-session-stores

Looks like there are a bunch of better defaults we could use? Are there good docs on how to customise this?

[gautamsi]

This is what I did to use mongodb based Store

const session = require('express-session');
const MongoStore = require('connect-mongo')(session);
const sessionStore = new MongoStore({url: CONNECT_TO});
// ......

module.exports = {
  keystone,
  apps: [
    new GraphQLApp({ sessionStore }),
    new StaticApp({ .... }),
    adminApp,
    new NextApp({ .... }),
  ],
};

[leobar37]

const sessionExpress = require("express-session");
const knexSesionStore = require("connect-session-knex")(sessionExpress);


 const app = new Keystone({
      secureCookies: false,
      adapter: this.bdAdapter(),
      sessionStore: new knexSesionStore({
        tablename: "sesions",
        knex: knex(configKnex),
      })
 });,
``