I feel like there are only three states to check on a KeyCloak token.
1. If you do not have a token then you are not logged in
2. If you have a token, it has an expiration time embedded in it. if you are not expired you are logged in
3. If your token is expired and you have a refresh token then you need to refresh your token. If that is successful then you are logged in. Otherwise you are not logged in.