Could also be that they use ory "only" for oauth 2.

Customer facing it looks like a combination of nextauth and auth0 (at least on my end)