I am developing an app in flutter which will have in app purchases. I am keeping track of user credits and some other things on my node server.
I am concerned that if I call my node api to increase user credits in my app code, it can be accessed by decompiling the apk. I don't know how to call my api securely and protect it.
I am currently calling my api simply from my app.I read that an app's source code can be accessed by decompiling the APK? If that is the case then my code can be altered to call my node server without the in app purchases.
I don't know if it is even possible or not or if this is even a concern. I don't know much about security because I am still a student. If anyone can guide me, I would appreciate it greatly. Thanks!