I want to enable specific CORS-headers for the userInfo endpoint as described here and here. For this I edited the file _UserInfoAPI_.xml
CORS
userInfo
_UserInfoAPI_.xml