I have a problem with the code written with Python and Django framework

I wrote a custom model and used Abstrcatuser in it, and instead of the username field, I used the phone number field.
Now, when I enter the login address in the api I wrote and want to get the access token and refresh token, it creates only these things for the superuser and tells the other users that the phone number or password is wrong if they are also correct.

I also use jwt.

I tried to make some changes in the code, but I didn’t find anything important