WYSIWYG embedded images - private token appended twice

[domdus]

Preflight Checklist

• I have completed all Troubleshooting Steps.
• I'm on the latest version of Directus.
• There's no other issue that already describes my problem.

Describe the Bug

When selecting an embedded image in WYSIWYG editor and click "image"-icon from the toolbar on top (right sidebar view opens), the access token param is appended twice. The image goes HTTP 500.

Image URL requested by sidebar view:
https://<DOMAIN>/assets/159ce235-9b5f-4dee-9d48-ff8de56a7509?access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImM0NjZkMDQ3LWQwZGItNDliZC1iN2EyLWQ3NmQzMjMzZDdjMyIsImlhdCI6MTYzMzY5MjE4MSwiZXhwIjoxNjMzNjkzMDgxLCJpc3MiOiJkaXJlY3R1cyJ9.KIpMiYa1WiblxDLyEXqLn1cKSJh0YlM-03mIqBMfzMk&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImM0NjZkMDQ3LWQwZGItNDliZC1iN2EyLWQ3NmQzMjMzZDdjMyIsImlhdCI6MTYzMzY5Mjc5NSwiZXhwIjoxNjMzNjkzNjk1LCJpc3MiOiJkaXJlY3R1cyJ9.hIZoQhT4RfJ2FJxZ_5IpT-4z7R6IkgWL4B8iSE4Mt5c

---

Related issue/note:
Since the token is being appended, no further parameter is accepted in the URL. Try saving a URL with additional params lead to a complete app/browser freeze.

We were used add a Storage Asset Preset -key to emdedded images actually to optimize them in size.
Embed URL example:
https://<DOMAIN>/assets/159ce235-9b5f-4dee-9d48-ff8de56a7509?key=embedded-image-preset

To Reproduce

• Embed an image in WYSIWYG editor
• Click-select the image and click image-icon from toolbar to get the sidebar view

What version of Directus are you using?

v9.0.0-rc.95

What version of Node.js are you using?

14.15.4

What database are you using?

Postgres 13

What browser are you using?

Chrome

What operating system are you using?

Windows 10

How are you deploying Directus?

PaaS

[rijkvanzanten]

@Nitwel Any thoughts?