User session is still active when verify_claims() is returning False, the corresponding issue can be followed here from the library.
If the library does not support this workflow, we need to find a way to clear the user session from Keycloak when the user is unauthorized. The existing provider_logout() can not be used directly since a view can not be directly called from the inherited class CustomOIDCAB.