But then it isn't stateless, right? Because you need to know which current tokens are unrefreshable.
You only have to involve state in 1 request every 10-15 minutes upon refresh. All other requests can be done without having to check for revocation. This is a pretty nice real-world tradeoff.