Via https://github.com/distribution/distribution/issues/1203 I found that the name should be library/postgres instead of postgres.
With such a token it is possible to do more requests like
curl --oauth2-bearer eyJhbGciO... \
-X GET \
https://registry-1.docker.io/v2/library/postgres/tags/list