fix forward auth realm for vhosts

forward_auth.py

@@ -34,7 +34,7 @@ def auth_basic(check, text="Access denied"):
         TODO: Add route(check_auth=...) parameter. '''
     def decorator(func):
         def wrapper(*a, **ka):
-            realm = request.headers['X-Forwarded-Host'].split('.')[0]
+            realm = '.'.join(request.headers['X-Forwarded-Host'].split('.')[:-2])
             user, password = request.auth or (None, None)
             if realm in users and user in users[realm]:
                 if user is None or not check(user, password, realm=realm):