CB

Looks like this just needs the field and to hook into Joomlas redirect behavior for this to send them to CB profile edit. Using the system plugin with URL rewriting/redirect just causes an infinite loop.

The redirect is done by checkUserRequireReset in doExecute just after the router. CB could do its redirect in the router and temporarily shut off the requireReset to stop Joomla from redirecting. Note with "Rewrite URLs" set to "Disable" Joomlas usage works fine.

Looks like the redirect can be overridden by setting the below Application values in our router.

site_reset_password_override
site_reset_password_option
site_reset_password_view
site_reset_password_layout
site_reset_password_tasks

This feature will require Rewrite URLs to be enabled. Otherwise should be fine to just use Joomlas profile edit if needed.