diff --git a/package-lock.json b/package-lock.json
index 6104780..33ded4a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,8 @@
 				"nice-grpc": "^2.1.17",
 				"nuxt": "^4.5.2",
 				"vue": "^3.5.13",
-				"vue-router": "^5.2.0"
+				"vue-router": "^5.2.0",
+				"zod": "^4.4.3"
 			},
 			"devDependencies": {
 				"@iconify-json/fa7-brands": "^1.2.4",
@@ -2800,6 +2801,15 @@
 				}
 			}
 		},
+		"node_modules/@nuxt/content/node_modules/zod": {
+			"version": "3.25.76",
+			"resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+			"integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/colinhacks"
+			}
+		},
 		"node_modules/@nuxt/devalue": {
 			"version": "2.0.2",
 			"resolved": "https://registry.npmjs.org/@nuxt/devalue/-/devalue-2.0.2.tgz",
@@ -21525,9 +21535,9 @@
 			}
 		},
 		"node_modules/zod": {
-			"version": "3.25.76",
-			"resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-			"integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+			"version": "4.4.3",
+			"resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+			"integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
 			"license": "MIT",
 			"peer": true,
 			"funding": {
diff --git a/package.json b/package.json
index cd1592e..754c528 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,8 @@
 		"nice-grpc": "^2.1.17",
 		"nuxt": "^4.5.2",
 		"vue": "^3.5.13",
-		"vue-router": "^5.2.0"
+		"vue-router": "^5.2.0",
+		"zod": "^4.4.3"
 	},
 	"devDependencies": {
 		"@iconify-json/fa7-brands": "^1.2.4",
diff --git a/src/pages/account/login/index.vue b/src/pages/account/login/index.vue
index 5fd037b..76ce6d4 100644
--- a/src/pages/account/login/index.vue
+++ b/src/pages/account/login/index.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import { FetchError } from 'ofetch';
+import type { ApiAuthLogin, ApiAuthLoginRequest } from '~/server/api/auth/login.post';
 
 const route = useRoute();
 const redirect = computed(() => route.query.redirect);
@@ -10,9 +11,12 @@ const errorMessage = ref<string | null>();
 
 async function loginSubmission() {
 	try {
-		await $fetch('/api/account/login', {
+		await $fetch<ApiAuthLogin>('/api/auth/login', {
 			method: 'POST',
-			body: loginForm
+			body: {
+				username: loginForm.username,
+				password: loginForm.password,
+			} satisfies ApiAuthLoginRequest
 		});
 
 		if (typeof redirect.value === 'string') {
@@ -24,7 +28,7 @@ async function loginSubmission() {
 		if (error instanceof FetchError) {
 			errorMessage.value = error.statusText;
 		} else {
-			errorMessage.value = `Error during registration: ${error}`; // TODO: localize
+			errorMessage.value = `Error during login: ${error}`; // TODO: localize
 		}
 
 		setTimeout(() => { // TODO: replace this toast
diff --git a/src/server/api/account/login/index.ts b/src/server/api/account/login/index.ts
deleted file mode 100644
index 27787e9..0000000
--- a/src/server/api/account/login/index.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { FetchError } from 'ofetch';
-
-interface LoginCCResponse {
-	refresh_token: string;
-	access_token: string;
-	token_type: string;
-	expires_in: number;
-}
-
-export default defineEventHandler(async (event) => {
-	const body = await readBody(event);
-
-	try {
-		const apiResponse = await $fetch<LoginCCResponse>(`/v1/login`, {
-			method: 'POST',
-			baseURL: useRuntimeConfig(event).public.apiBase,
-			body: { ...body, grant_type: 'password' }
-		});
-
-		setCookie(event, 'refresh_token', apiResponse.refresh_token);
-		setCookie(event, 'access_token', apiResponse.access_token);
-		setCookie(event, 'token_type', apiResponse.token_type);
-
-		setResponseStatus(event, 200);
-		event.node.res.end();
-	} catch (error: unknown) {
-		if (error instanceof FetchError) {
-			setResponseStatus(event, error.status, error.data.error);
-		} else {
-			setResponseStatus(event, 500);
-		}
-
-		event.node.res.end();
-
-		return;
-	}
-});
diff --git a/src/server/api/account/login/refresh.ts b/src/server/api/account/login/refresh.ts
deleted file mode 100644
index 25be858..0000000
--- a/src/server/api/account/login/refresh.ts
+++ /dev/null
@@ -1 +0,0 @@
-// TODO: endpoint for refreshing tokens
diff --git a/src/server/api/account/register/index.ts b/src/server/api/account/register/index.ts
deleted file mode 100644
index 1127e0c..0000000
--- a/src/server/api/account/register/index.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { FetchError } from 'ofetch';
-
-interface RegisterCCResponse { // TODO: this is the same as the login response. figure out where we should put types and merge into AuthCCReponse!
-	refresh_token: string;
-	access_token: string;
-	token_type: string;
-	expires_in: number;
-}
-
-export default defineEventHandler(async (event) => {
-	const body = await readBody(event);
-
-	try {
-		const apiResponse = await $fetch<RegisterCCResponse>(`/v1/register`, {
-			method: 'POST',
-			baseURL: useRuntimeConfig(event).public.apiBase,
-			body: body
-		});
-
-		setCookie(event, 'refresh_token', apiResponse.refresh_token);
-		setCookie(event, 'access_token', apiResponse.access_token);
-		setCookie(event, 'token_type', apiResponse.token_type);
-
-		setResponseStatus(event, 200);
-		event.node.res.end();
-	} catch (error: unknown) {
-		if (error instanceof FetchError) {
-			setResponseStatus(event, error.status, error.data.error);
-		} else {
-			setResponseStatus(event, 500);
-		}
-
-		event.node.res.end();
-	}
-});
diff --git a/src/server/api/auth/login.post.ts b/src/server/api/auth/login.post.ts
new file mode 100644
index 0000000..f785df6
--- /dev/null
+++ b/src/server/api/auth/login.post.ts
@@ -0,0 +1,49 @@
+import z from 'zod';
+import { readZodBody } from '~/server/utils/readZodBody';
+import { useGrpc } from '~/server/utils/useGrpc';
+import { ServerError } from 'nice-grpc';
+
+export type ApiAuthLogin = {
+	accessToken: string
+	refreshToken: string;
+}
+
+const LoginSchema = z.object({
+	username: z.string(),
+	password: z.string(),
+})
+export type ApiAuthLoginRequest = z.infer<typeof LoginSchema>
+
+export default defineEventHandler(async (event): Promise<ApiAuthLogin> => {
+	const body = await readZodBody(event, LoginSchema);
+	const grpc = useGrpc(event);
+
+	try {
+		const res = await grpc.login({
+			username: body.username,
+			password: body.password,
+			grantType: 'password'
+		});
+
+		return {
+			accessToken: res.accessToken,
+			refreshToken: res.refreshToken,
+		}
+	} catch (error: unknown) {
+		if (error instanceof ServerError) {
+			if (error.details === 'INVALID_ARGUMENT: User not found') {
+				throw createError({
+					status: 400,
+					statusText: 'User not found',
+				})
+			}
+			if (error.details === 'INVALID_ARGUMENT: Password is incorrect') {
+				throw createError({
+					status: 400,
+					statusText: 'Password was incorrect',
+				})
+			}
+		}
+		throw error;
+	}
+});
diff --git a/src/server/utils/readZodBody.ts b/src/server/utils/readZodBody.ts
new file mode 100644
index 0000000..b943cfb
--- /dev/null
+++ b/src/server/utils/readZodBody.ts
@@ -0,0 +1,10 @@
+import type { ZodType } from "zod";
+
+export async function readZodBody<T extends ZodType>(event: H3Event, schema: T) {
+	const body = await readValidatedBody(event, schema.safeParse);
+	if (!body.success) throw createError({
+		status: 400,
+		statusText: 'Invalid input'
+	})
+	return body.data;
+}