Is there any possibility to override or extend the core VerifyEmailAddressAction
so that users, after clicking the token email link (with successful verification), are forced to set an initial password? There should be no initial password from the portal.
My idea is to (auto)login the user after verification and redirect to a change-password page.
But the class is not an OSGI component and it is part of portal-impl. Also, I did not find any settings or properties to configure the portal for this scenario. What could I do to modify this behavior?