I am developing a project in React which runs some simulations. How exactly these simulations run is a trade secret which I would rather not expose. Currently, the generated app has an authentication module using AWS Cognito to ensure that only allowed users use it, but I am afraid that if the app is openly available, anyone can reverse engineer the JS code and see how the simulations are run.

Is there anyway to protect the code behind the same authentication module?