diff --git a/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml b/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml
new file mode 100644
index 0000000..e06e2e2
--- /dev/null
+++ b/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    Recently we moved the logging of API request in rest_client's
+    raw_request which end up logging the credentials also from
+    Token client request. This issue has been fixed now.