Is there any way to encript api so that no one can get data directly if he runs it from emulator/restclients/or any api call by reverse engineering the app ...For example you can only get encripted data if you see Banking/UBER/FACEBOOK etc app ...They are much secure ...Is it possible to build like this with laravel/lumen ?I think in o auth/passport/jwt authorised user can call api after reverse engineering ... I think there are so many good developers in laracasts ...Pls give some ideas about that ...
https will encrypt your data so that it cannot be decrypted.
Yes, the user could run tools that insert a man in the middle attack on the client so that the https session with the server is between the MITM and the server.
So then, the problem is actually with your client, not with the Laravel application. The right solution depends then what type of client it is.