diff --git a/roles/keycloak/files/providers/keycloak-mailpass-rest/src/main/java/org/archlinux/keycloak/mailpass/rest/MailPassResourceProvider.java b/roles/keycloak/files/providers/keycloak-mailpass-rest/src/main/java/org/archlinux/keycloak/mailpass/rest/MailPassResourceProvider.java
index 4f158df9f201ace3e4708b0f574678fe7ca389b7..8a6d98d31d5229d04427685765f82e7d8b3906ef 100644
--- a/roles/keycloak/files/providers/keycloak-mailpass-rest/src/main/java/org/archlinux/keycloak/mailpass/rest/MailPassResourceProvider.java
+++ b/roles/keycloak/files/providers/keycloak-mailpass-rest/src/main/java/org/archlinux/keycloak/mailpass/rest/MailPassResourceProvider.java
@@ -9,9 +9,9 @@ import org.keycloak.services.resource.RealmResourceProvider;
  */
 public class MailPassResourceProvider implements RealmResourceProvider {
 
-  private KeycloakSession session;
-  private String realmName;
-  private String realmRole;
+  private final KeycloakSession session;
+  private final String realmName;
+  private final String realmRole;
 
   /**
    * Store the pre-configured SPI fields to enable verification before requests take place.