Demo PostgreSQL session store

Author: colinrotherham

package-lock.json

@@ -60,12 +60,14 @@
     "@eslint/markdown": "^7.5.1",
     "@types/body-parser": "^1.19.6",
     "@types/browser-sync": "^2.29.1",
+    "@types/connect-pg-simple": "^7.0.3",
     "@types/cookie-parser": "^1.4.10",
     "@types/cookie-session": "^2.0.49",
     "@types/express": "^5.0.6",
     "@types/express-flash": "^0.0.5",
     "@types/express-session": "^1.18.2",
     "@types/nunjucks": "^3.2.6",
+    "@types/pg": "^8.16.0",
     "@types/portscanner": "^2.1.4",
     "@types/wait-on": "^5.3.4",
     "eslint": "^9.39.2",

package.json

@@ -0,0 +1,3 @@
+POSTGRES_DB=sessions
+POSTGRES_PASSWORD=not-a-secret
+POSTGRES_URL=postgres://postgres:not-a-secret@localhost:5432/sessions

testapp/.env

@@ -1,7 +1,12 @@
+import connectPgSimple from 'connect-pg-simple'
 import cookieSession from 'cookie-session'
+import expressSession from 'express-session'
+import { Pool } from 'pg'
 
 import * as config from './config.js'
 
+const { POSTGRES_URL, NODE_ENV } = process.env
+
 /**
  * Cookie session store
  */
@@ -13,4 +18,32 @@ function getCookieSession() {
   })
 }
 
-export const session = getCookieSession()
+/**
+ * PostgreSQL session store
+ */
+function getDatabaseSession() {
+  const PGStore = connectPgSimple(expressSession)
+
+  const pool = new Pool({
+    connectionString: POSTGRES_URL,
+    ssl: NODE_ENV === 'production' ? { rejectUnauthorized: false } : false
+  })
+
+  const store = new PGStore({
+    createTableIfMissing: true,
+    pool: pool
+  })
+
+  return expressSession({
+    cookie: {
+      maxAge: config.sessionMaxAge,
+      secure: NODE_ENV === 'production'
+    },
+    resave: false,
+    saveUninitialized: false,
+    secret: config.sessionName,
+    store
+  })
+}
+
+export const session = POSTGRES_URL ? getDatabaseSession() : getCookieSession()

testapp/app/session.js

@@ -0,0 +1,23 @@
+services:
+  db:
+    env_file: .env
+    image: postgres
+    restart: always
+    shm_size: 128mb
+
+    ports:
+      - 5432:5432
+
+    volumes:
+      - data_sql:/var/lib/postgresql
+      - ../node_modules/connect-pg-simple/table.sql:/docker-entrypoint-initdb.d/init.sql
+
+  adminer:
+    image: adminer
+    restart: always
+
+    ports:
+      - 8080:8080
+
+volumes:
+  data_sql:

testapp/compose.yaml

@@ -8,11 +8,14 @@
   },
   "license": "MIT",
   "dependencies": {
+    "connect-pg-simple": "^10.0.0",
     "cookie-session": "^2.1.1",
     "express": "^5.2.1",
+    "express-session": "^1.19.0",
     "nhsuk-frontend": "^10.3.1",
     "nhsuk-prototype-kit": "*",
-    "nunjucks": "^3.2.4"
+    "nunjucks": "^3.2.4",
+    "pg": "^8.19.0"
   },
   "files": [],
   "engines": {