fix: hashed password checks on refresh token.

apis/serializers.py

@@ -216,7 +216,7 @@ def validate(self, attrs):
         user = User.objects.get(id=user_id)
         if settings.SIMPLE_JWT.get("REVOKE_TOKEN_CLAIM"):
             current_user_password = get_md5_hash_password(user.password)
-            if current_user_password != refresh.payload.get("REVOKE_TOKEN_CLAIM"):
+            if current_user_password != refresh.get("password"):
                 raise serializers.ValidationError({"message": _("Invalid token payload")})
 
         # Set additional claims in the access token manually