Store session variables in CAP Node JS application

Hi,

Is there a suitable way to store session context variables for a user in a CAP NodeJS application? We have a scenario requiring connectivity with an external application which does not support principal propagation and are considering an approach where we authenticate the user through an oAuth flow in the CAP application. We need a safe way of storing the users authentication token.

Any input on how to store session variables as well as on the approach overall regarding the authentication is much appreciated.

Thanks!

//Carl