diff --git a/lib/Model/Token.php b/lib/Model/Token.php
index f5f66c001..ebd629b2d 100644
--- a/lib/Model/Token.php
+++ b/lib/Model/Token.php
@@ -1,6 +1,7 @@
 <?php
 
 declare(strict_types=1);
+
 /**
  * SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-or-later
@@ -12,13 +13,13 @@
 
 class Token implements JsonSerializable {
 
-	private ?string $idToken;
-	private string $accessToken;
-	private int $expiresIn;
-	private ?int $refreshExpiresIn;
-	private ?string $refreshToken;
-	private int $createdAt;
-	private ?int $providerId;
+	private readonly ?string $idToken;
+	private readonly string $accessToken;
+	private readonly int $expiresIn;
+	private readonly ?int $refreshExpiresIn;
+	private readonly ?string $refreshToken;
+	private readonly int $createdAt;
+	private readonly ?int $providerId;
 
 	public function __construct(array $tokenData) {
 		$this->idToken = $tokenData['id_token'] ?? null;
@@ -43,8 +44,7 @@ public function getExpiresIn(): int {
 	}
 
 	public function getExpiresInFromNow(): int {
-		$expiresAt = $this->createdAt + $this->expiresIn;
-		return $expiresAt - time();
+		return ($this->createdAt + $this->expiresIn) - time();
 	}
 
 	public function getRefreshExpiresIn(): ?int {
@@ -53,12 +53,10 @@ public function getRefreshExpiresIn(): ?int {
 
 	public function getRefreshExpiresInFromNow(): int {
 		// if there is no refresh_expires_in, we assume the refresh token never expires
-		// so we don't need getRefreshExpiresInFromNow
 		if ($this->refreshExpiresIn === null) {
 			return 0;
 		}
-		$refreshExpiresAt = $this->createdAt + $this->refreshExpiresIn;
-		return $refreshExpiresAt - time();
+		return ($this->createdAt + $this->refreshExpiresIn) - time();
 	}
 
 	public function getRefreshToken(): ?string {
@@ -93,7 +91,7 @@ public function refreshIsExpiring(): bool {
 		return time() > ($this->createdAt + (int)($this->refreshExpiresIn / 2));
 	}
 
-	public function getCreatedAt() {
+	public function getCreatedAt(): int {
 		return $this->createdAt;
 	}