Is it possible to decompile a mobile application?

Question

reverse engineering

Question. When developing a mobile application on ReactNative and prescribing access to the Backend there - if the people who downloaded it have the opportunity to decompile, extract the authentication data and use them to the detriment?
Or is the data in the source code securely encrypted?

Answer 1

Yes, it's easy - with a simple notepad you can see all the assignments of the side.

Answer 2

If you yourself did not encrypt them securely, then the constants are not encrypted.

Answer 3

You should use the API and work with it already, checking the rights for each action.