rest - Secure HTTPS connection to Node.js server from client -

i developing backend mobile application using node.js handle https requests. have set ssl connect client server , wondering if secure enough.

i don't have experience intercepting endpoints mobile devices, have seen possible people monitor internet traffic out of cellphones , pick endpoints server requests. have seen hacks on tinder people can see response json , automate swipes sending http requests tinder's endpoints.

my real concern people able update/read/modify data on backend. can implement oauth2 schema still see cases in people abuse system.

my main question whether or not using https secure enough protect data, or if session authentication system needed oauth2.

thanks.

https, providing configured, ensure message not read or changed en route , client can know server talking not fake.

it secure transport. not secure application.

for example supposing have app allows send message saying https://www.example.com/transfermoney?from=kyle&to=bazzadp&amount=9999.99 , server based on parameters. send message myself - i've no need intercept app messages.

normally server needs authentication https to, example, verify kyle user can send above message , not else. https gives server authentication not client authentication (unless using 2 way certificate https).

so question is, if attacker cannot read or alter messages between app , server can still cause harm? measure of whether secure enough.