diff --git a/handlers.go b/handlers.go
index 2c9e812e99a4467539e3397c10529ad719205dec..b6fa2ddb38156ed264eaa370dd4420cfc0cbdf1f 100644
--- a/handlers.go
+++ b/handlers.go
@@ -197,6 +197,7 @@ func (r *KeycloakProxy) authenticationHandler() gin.HandlerFunc {
 			fields := log.Fields{
 				"username":   userContext.name,
 				"expired_on": userContext.expiresAt.String(),
+				"error": err.Error(),
 			}
 
 			// step: if the error post verification is anything other than a token expired error