I think this allows you to turn whatever you use for user authentication into an OAuth2 provider by letting you implement the hooks that authenticate users while handling the OAuth2 bits. Or at least that is what I got from the introduction at https://www.ory.sh/docs/hydra/#what-is-ory-hydra .