diff --git a/pkg/clientauth/middleware/token-exchange.go b/pkg/clientauth/middleware/token-exchange.go
index 1202aa30821..b90eb195db9 100644
--- a/pkg/clientauth/middleware/token-exchange.go
+++ b/pkg/clientauth/middleware/token-exchange.go
@@ -84,6 +84,7 @@ func (m tokenExchangeMiddlewareImpl) RoundTrip(req *http.Request) (res *http.Res
 	})
 
 	if err != nil {
+		log.Error("token signing failed", "error", err)
 		return nil, fmt.Errorf("failed to exchange token: %w", err)
 	}
 	req.Header.Set("X-Access-Token", "Bearer "+token.Token)