Hi Norman,
You can take a look at the iWeb project:
http://iwebcf.codeplex.com/
There you'll find a way to answer many of your questions. Maybe you can just create the methods you need as an extension to iWeb.
Recently, I've developed a 'Single Sign On' (and some related web services) module for DNN, where I've followed a different approach.
I've created REST web services (zero configuration at the server side, no update to the web.config file or anything else is needed) based on
http://msdn.microsoft.com/en-us/libra...
Note/warning: The 'WCF REST Starter Kit' seems to be discontinued and replaced by new classes in .NET 4.0. I didn't want to jump th 4.0 at this time so I've utilized the Starter Kit anyway, knowing that in the future (6 months? 1 year?) I'll be removing it and moving the code to .NET 4.0.
Regarding the authentication/security, I've implemented a RequestInterceptor handling all the security (the starter kit includes sample code). It's easy to make the web services of your choice enabled/disabled based on a module's setting. It can also include authorization rules, based on DNN roles. The approach for authorization and authentication was implementing something similar to what Amazon S3 does (why reinvent the wheel if they already created it and it's a good one?): see
http://docs.amazonwebservices.com/Ama...
and
http://docs.amazonwebservices.com/Ama...
Instead of using the Access Key ID and Secret Access Key, the security is based on the DNN portal, user and password. Of course, the stronger the passwords, the better. The request headers and hashing process is pretty much the same. There are many .Net sample code for S3.
Thanks,
Horacio.-