diff --git a/apps/federation/appinfo/routes.php b/apps/federation/appinfo/routes.php
index b9515812a0119762c7242086c9d292329443c1fc..4c742dd705cfb38c870fb3b821089b6baeb06b7a 100644
--- a/apps/federation/appinfo/routes.php
+++ b/apps/federation/appinfo/routes.php
@@ -43,6 +43,7 @@ $application->registerRoutes(
 			],
 		],
 		'ocs' => [
+			// old endpoints, only used by Nextcloud and ownCloud
 			[
 				'name' => 'OCSAuthAPI#getSharedSecret',
 				'url' => '/api/v1/shared-secret',
@@ -53,6 +54,19 @@ $application->registerRoutes(
 				'url' => '/api/v1/request-shared-secret',
 				'verb' => 'POST',
 			],
+			// new endpoints, published as public api
+			[
+				'name' => 'OCSAuthAPI#getSharedSecret',
+				'root' => '/cloud',
+				'url' => '/shared-secret',
+				'verb' => 'GET',
+			],
+			[
+				'name' => 'OCSAuthAPI#requestSharedSecret',
+				'root' => '/cloud',
+				'url' => '/shared-secret',
+				'verb' => 'POST',
+			],
 		],
 	]
 );