refactor: move IAL 403 redirect into useHouseholdData hook

Moves the 403 + requiredIal detection and redirect logic from
DashboardContent into the useHouseholdData hook so all consumers
get the behavior automatically. Exposes requiresProofing flag
for loading state during redirect.

Author: James Blair

src/SEBT.Portal.Web/src/features/household/api/useHouseholdData.test.tsx

@@ -14,6 +14,10 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
 import { server } from '@/mocks/server'
 
+vi.mock('next/navigation', () => ({
+  useRouter: () => ({ push: vi.fn() })
+}))
+
 import { useHouseholdData } from './useHouseholdData'
 
 const TEST_HOUSEHOLD_DATA = {

src/SEBT.Portal.Web/src/features/household/api/useHouseholdData.ts

@@ -1,4 +1,8 @@
+'use client'
+
 import { useQuery } from '@tanstack/react-query'
+import { useRouter } from 'next/navigation'
+import { useEffect } from 'react'
 
 import { ApiError, apiFetch } from '@/api'
 
@@ -15,10 +19,17 @@ async function fetchHouseholdData(): Promise<HouseholdData> {
  * Uses real-time fetching (staleTime: 0) to ensure data freshness
  * per ticket requirement to mitigate stale household/custody data.
  *
- * @returns TanStack Query result with household data
+ * When the API returns 403 with a `requiredIal` extension, the user's IAL is
+ * below the minimum required by their cases. The hook automatically redirects
+ * to `/login/id-proofing` and exposes `requiresProofing` so consumers can
+ * render a loading state during the redirect.
+ *
+ * @returns TanStack Query result with household data, plus `requiresProofing` flag
  */
 export function useHouseholdData() {
-  return useQuery({
+  const router = useRouter()
+
+  const query = useQuery({
     queryKey: ['householdData'],
     queryFn: fetchHouseholdData,
     staleTime: 0,
@@ -34,4 +45,19 @@ export function useHouseholdData() {
     },
     retryDelay: (attemptIndex) => Math.min(1000 * 2 ** attemptIndex, 10000)
   })
+
+  // A 403 with requiredIal in the response body means the user's IAL is below
+  // the minimum required by their cases. Redirect to ID proofing.
+  const requiresProofing =
+    query.error instanceof ApiError &&
+    query.error.status === 403 &&
+    'requiredIal' in ((query.error.data as Record<string, unknown>) ?? {})
+
+  useEffect(() => {
+    if (requiresProofing) {
+      router.push('/login/id-proofing')
+    }
+  }, [requiresProofing, router])
+
+  return { ...query, requiresProofing }
 }

src/SEBT.Portal.Web/src/features/household/components/DashboardContent/DashboardContent.tsx

@@ -3,7 +3,6 @@
 import { ApiError } from '@/api'
 import { AnalyticsEvents, useDataLayer } from '@sebt/analytics'
 import { Alert } from '@sebt/design-system'
-import { useRouter } from 'next/navigation'
 import { useEffect } from 'react'
 import { useTranslation } from 'react-i18next'
 
@@ -21,22 +20,9 @@ import { UserProfileCard } from '../UserProfileCard'
 // TODO: Add to CSV: "S2 - Portal Dashboard - Error Heading" and "S2 - Portal Dashboard - Error Description"
 export function DashboardContent() {
   const { t } = useTranslation('dashboard')
-  const router = useRouter()
-  const { data, isLoading, isError, error } = useHouseholdData()
+  const { data, isLoading, isError, error, requiresProofing } = useHouseholdData()
   const { setPageData, setUserData, trackEvent } = useDataLayer()
 
-  // A 403 with requiredIal in the response body means the user's IAL is below
-  // the minimum required by their cases. Redirect to ID proofing.
-  const requiresProofing =
-    error instanceof ApiError &&
-    error.status === 403 &&
-    'requiredIal' in ((error.data as Record<string, unknown>) ?? {})
-  useEffect(() => {
-    if (requiresProofing) {
-      router.push('/login/id-proofing')
-    }
-  }, [requiresProofing, router])
-
   useEffect(() => {
     if (isLoading) return
     if (isError) {